CVE-2014-7270

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-01 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmware 3.0.0.4.376.3715 and earlier, and RT-N56U routers with firmware 3.0.0.4.376.3715 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected products

ASUS Rt-Ac56S: all versions
ASUS Rt-Ac56S Firmware: through 3.0.0.4.376.3715
ASUS RT-AC68U: all versions
ASUS Japan Inc. RT-AC68U: through 3.0.0.4.376.3715
ASUS Rt-Ac87U: all versions
ASUSTeK COMPUTER INC. RT-AC87U: through 3.0.0.4.378.3754
ASUS Rt-N56U: all versions
ASUS Rt-N56U Firmware: through 3.0.0.4.376.3715
ASUS Rt-N66U: all versions
ASUS Rt-N66U Firmware: through 3.0.0.4.376.3715

References

Get alerted when CVE-2014-7270 or the next vulnerability affects your stack