CVE-2013-7293

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traffic by controlling the server associated with that hostname.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-16 CWE-284

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/191750Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/64799
http://www.kb.cert.org/vuls/id/191750Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/64799

Timeline

Published: Jan 15, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-72945.0The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (res CVE-2013-72954.0Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platf CVE-2013-72965.0The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, w CVE-2013-72985.0query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP qu CVE-2013-72995.0framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information via a header that en CVE-2013-73005.0Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to CVE-2013-73015.0Cantata before 1.2.2 does not restrict access to files in the play queue, which allows remote attackers to obtain sensitive information by r CVE-2013-73026.8Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new cu CVE-2013-73034.3Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php CVE-2013-73044.3Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which a CVE-2013-73054.3fpw.php in e107 through 1.0.4 does not check the user_ban field, which makes it easier for remote attackers to reset passwords by sending a CVE-2013-73065.4The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (