CVE-2017-15653

CVE-2017-15653 describes an improper administrator IP validation vulnerability in Asuswrt, affecting all versions up to 3.0.0.4.380.7743. An authenticated attacker can exploit this flaw by knowing the administrator's session token and using a specific User-Agent string to execute arbitrary actions. This vulnerability carries a high CVSS score of 8.8, indicating a network-based attack with low complexity, requiring only low privileges, and potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.