Skip to main content

Improper Physical Access Control

CVE-2024-28326

Medium
6.8/10

Summary

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface.

  • LOW
  • PHYSICAL
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-1263 - Improper Physical Access Control

The product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access to these areas.

References

Advisory Timeline

  • Published