CVE-2020-15498

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253

published August 26, 2020

CVSS
—
EPSS
0%
Percentile
35.3
In the wild
Unconfirmed
What it is

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00421 · 35.3th percentile
Published
2020-08-26T12:05Z
EPSS history
Timeline
  • 26 AUG 12:05Z
    An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253
    cvelistv5