CVE-2026-13385:詳細資料

CVE-2026-13385

2026-07-15
02h18 +00:00
Authorization problems
A07-Identif. and Authent. Fail
2026-10-24
22h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router download and execute arbitrary command via a spoofed server. Refer to the '  Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
CWE-354 Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.

參考資料