CVE-2023-31195 Security feature bypass in ASUS Router RT-AX3000
Attackers can hijack user sessions via man-in-the-middle attacks on unencrypted connections due to missing Secure cookie attributes in ASUS router firmware.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-31195?
CVE-2023-31195 is a medium-severity vulnerability in ASUSTeK COMPUTER INC. ASUS Router RT-AX3000, published on 13 Jun 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack, and a user is tricked to log into the affected device through an unencrypted ('http') connection, the user's session may be hijacked.
Weakness: CWE-319
Which versions are affected by CVE-2023-31195?
It affects 1 product.
Products include Asus Rt-Ax3000 Firmware.
How do I fix CVE-2023-31195?
No fix has been published for CVE-2023-31195 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-31195 being exploited?
There is no known exploitation of CVE-2023-31195 in the wild and no public exploit code.
Other vulnerabilities in ASUSTeK COMPUTER INC. ASUS Router RT-AX3000
Sources
Also known as GHSA-p4qc-734h-4fcp.