[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs5u4YqiGKZDH-Dtu-7fiJFmK8fxl0hrttHfC2xrIxiQ":3,"g5a-risk:CVE-2017-5891":124},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":14,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":69,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":14,"otxData":14,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":120,"notableEvents":121},"CVE-2017-5891","What is CVE-2017-5891?","ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF.","2017-05-10T05:29:00.19","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.00478,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"asus","rt-ac1750_firmware","3.0.0.4.380.7266","cpe:2.3:o:asus:rt-ac1750_firmware:3.0.0.4.380.7266:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"rt-ac1750","-","cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*",2,[54,60,65,67],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fwww.asus.com\u002Fsupport\u002FDownload\u002F11\u002F2\u002F0\u002F161\u002F45\u002F","Asus",[58,59],"Patch","Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwwws.nightwatchcybersecurity.com\u002F2017\u002F05\u002F09\u002Fmultiple-vulnerabilities-in-asus-routers\u002F","Nightwatchcybersecurity",[64],"Third Party Advisory",{"url":55,"source":56,"tags":66},[58,59],{"url":61,"source":62,"tags":68},[64],4,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2017-5891? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-5891, a high severity cyber security vulnerability from 2017. ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.3...","CVE-2017-5891, CVE-2017-5891 vulnerability, CVE-2017-5891 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, asus security, rt-ac1750_firmware vulnerability, rt-ac1750 vulnerability","\u002Fwhat-is\u002Fcve-2017-5891",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":9,"dateModified":10,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-5891","Cybersecurity","CVE-2017-5891, CVE-2017-5891 vulnerability, CVE-2017-5891 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":109,"Negate":14,"Nodes":110},"AND",[111,116],{"Operator":112,"Negate":14,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":115,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"EC4B1CF7-28CF-4DF7-BC60-2594E9F82CC8",{"Operator":112,"Negate":14,"CPEMatch":117},[118],{"Vulnerable":14,"Criteria":51,"MatchCriteriaID":119,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"59001E8D-E835-464A-915A-AAF59F2F397F",[],[],{"lastModified":10,"cacheTime":123,"version":32},1792372321824,{"score":125,"band":126,"action":127,"scoredAt":128},47,"Medium","Plan remediation","2026-10-17T08:33:44.230918+00:00"]