CVE-2016-6557: ASUS Ea-n66 Firmware

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

Affected products

• ASUS Ea-n66 Firmware: affected versions not specified
• ASUS Rp-AC52 Firmware: up to and including 1.0.1.1s
• ASUS Rp-AC56 Firmware: affected versions not specified
• ASUS Rp-n12 Firmware: affected versions not specified
• ASUS Rp-n14 Firmware: affected versions not specified
• ASUS Rp-n53 Firmware: affected versions not specified
• ASUS Wmp-n12 Firmware: affected versions not specified

Published 2018-07-13. Last modified 2026-06-17.