CVE-2023-47678

2023-11-1501:31:11

jpcert

www.cve.org

rt-ac87u

access control

vulnerability

unauthorized file access

tftp

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

29.5%

JSON

An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.

CNA Affected

[
  {
    "vendor": "ASUSTeK COMPUTER INC.",
    "product": "RT-AC87U",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]