=====================================================================

                           CERT-Renater

               Note d'Information No. 2013/VULN453
_____________________________________________________________________

DATE                : 10/10/2013

HARDWARE PLATFORM(S): ASUS RT-N10E Wireless Router.

OPERATING SYSTEM(S):  ASUS RT-N10E Wireless Router firmware versions
                                     prior to 2.0.0.25.

======================================================================
http://www.kb.cert.org/vuls/id/984366
______________________________________________________________________

Vulnerability Note VU#984366
ASUS RT-N10E Wireless Router vulnerable to authentication bypass

Original Release date: 04 oct. 2013 | Last revised: 04 oct. 2013


Overview

ASUS RT-N10E Wireless Routers contain an authentication bypass
vulnerability (CWE-592).


Description

CWE-592: Authentication Bypass Issues

ASUS RT-N10E Wireless Routers contain an authentication bypass
vulnerability. An attacker with network access to the device can
navigate to the web page http://RouterIPAddress/qis/QIS_finish.htm
The attacker will be presented with a web page containing the device's
configuration without entering any login credentials. This web page
will display the device's administrator password. The default
configuration for this device is to only allow clients connected to the
Local Area Network (LAN) to access the system web interface.

This vulnerability has been reported in ASUS Wireless-N150 Router
RT-N10E firmware versions 2.0.0.24 and earlier.


Impact

An unauthenticated attacker that is connected to router's LAN may be
able to retrieve the device's administrator password, allowing them to
directly access the device's configuration page.


Solution

Apply an Update

Asus has released firmware version 2.0.0.25 to address this
vulnerability. If an update is not possible, please consider the
following workarounds.

Restrict network access

Restrict network access to the ASUS Wireless-N150 Router RT-N10E system
web interface and other devices using open protocols like HTTP.

Disable WAN device management

Restrict network access to the ASUS Wireless-N150 Router RT-N10E system
web interface from Internet connections.


Vendor Information (Learn More)

Vendor	Status	Date Notified	Date Updated
AsusTek Computer Inc.	Affected	19 Aug 2013	04 Oct 2013
If you are a vendor and your product is affected, let us know.


CVSS Metrics (Learn More)
Group 	Score 	Vector
Base 	5,6 	AV:L/AC:L/Au:N/C:C/I:P/A:N
Temporal 	4,6 	E:F/RL:OF/RC:C
Environmental 	1,2 	CDP:ND/TD:L/CR:ND/IR:ND/AR:ND


References

    http://cwe.mitre.org/data/definitions/592.html
    http://www.asus.com/Networking/RTN10E/
    http://www.asus.com/Networking/RTN10E/#support_Download

Credit

Thanks to Sanket Karalkar for reporting this vulnerability.

This document was written by Adam Rauf.


Other Information

    CVE IDs: CVE-2013-3610
    Date Public: 04 oct. 2013
    Date First Published: 04 oct. 2013
    Date Last Updated: 04 oct. 2013
    Document Revision: 19

Feedback

If you have feedback, comments, or additional information about this
vulnerability, please send us email.


=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================