VULNERABILITY INTELLIGENCE
CVE-2013-3610
CVSS score6.1 MEDIUM
EPSS probability0.71%
CISA KEVNot currently listed
Published2013-10-05
Last modified2026-06-16
CVSS vectorAV:A/AC:L/Au:N/C:C/I:N/A:N
Description
qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- cret@cert.org — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource