Read the docs
TI-2013-02703 Aliases CVE-2013-3093GHSA-8cpg-m77x-38cp

ASUS RT-N56U devices allow CSRF.

Priority LOW 39CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

ASUS RT-N56U devices allow CSRF.

Why it matters now

EPSS 0.00739 54th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:o:asus:rt-n56u_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*3.0.0.4.374_979VulnerableASUS
cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
cpe:2.3:o:asus:rt-n10u_firmware:3.0.0.4.374_168:*:*:*:*:*:*:*3.0.0.4.374_168VulnerableASUS
cpe:2.3:h:asus:rt-n10u:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
cpe:2.3:o:asus:dsl-n55u_firmware:3.0.0.4.374_1397:*:*:*:*:*:*:*3.0.0.4.374_1397VulnerableASUS
cpe:2.3:h:asus:dsl-n55u:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
cpe:2.3:o:asus:rt-ac66u_firmware:3.0.0.4.374_2050:*:*:*:*:*:*:*3.0.0.4.374_2050VulnerableASUS
cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
cpe:2.3:o:asus:rt-n15u_firmware:3.0.0.4.374_16:*:*:*:*:*:*:*3.0.0.4.374_16VulnerableASUS
cpe:2.3:h:asus:rt-n15u:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
  • cpe:2.3:o:asus:rt-n56u_firmware:3.0.0.4.374_979:*:*:*:*:*:*:* Versions 3.0.0.4.374_979 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
  • cpe:2.3:o:asus:rt-n10u_firmware:3.0.0.4.374_168:*:*:*:*:*:*:* Versions 3.0.0.4.374_168 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-n10u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
  • cpe:2.3:o:asus:dsl-n55u_firmware:3.0.0.4.374_1397:*:*:*:*:*:*:* Versions 3.0.0.4.374_1397 Vulnerable ·ASUS
  • cpe:2.3:h:asus:dsl-n55u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
  • cpe:2.3:o:asus:rt-ac66u_firmware:3.0.0.4.374_2050:*:*:*:*:*:*:* Versions 3.0.0.4.374_2050 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
  • cpe:2.3:o:asus:rt-n15u_firmware:3.0.0.4.374_16:*:*:*:*:*:*:* Versions 3.0.0.4.374_16 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-n15u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:asus:rt-n53_firmware:3.0.0.4.374_311:*:*:*:*:*:*:*3.0.0.4.374_311VulnerableASUS
cpe:2.3:h:asus:rt-n53:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
cpe:2.3:o:asus:rt-n16_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*3.0.0.4.374_979VulnerableASUS
cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:*not specified by NVDRunning onASUS
  • cpe:2.3:o:asus:rt-n53_firmware:3.0.0.4.374_311:*:*:*:*:*:*:* Versions 3.0.0.4.374_311 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-n53:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
  • cpe:2.3:o:asus:rt-n16_firmware:3.0.0.4.374_979:*:*:*:*:*:*:* Versions 3.0.0.4.374_979 Vulnerable ·ASUS
  • cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-3093
  2. 2026-10-03 Alias added: GHSA-8cpg-m77x-38cp

References

—

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences