CVE-2024-28327 describes a vulnerability in the Asus RT-N12+ B1 router where user passwords are stored in plaintext. This insecure storage allows local attackers to retrieve these passwords without needing privileges or user interaction, potentially leading to unauthorized access and modification of router configurations. The vulnerability is classified under CWE-312 (Cleartext Storage of Sensitive Information) and has a CVSS 3.1 base score of 8.4, reflecting high impact on confidentiality, integrity, and availability. There is no information on available patches or fixed versions, and no known exploits in the wild have been reported as of the publication date.

Local attackers can obtain user passwords stored in plaintext on the affected router, enabling unauthorized access to the device and the ability to modify its settings. This compromises the confidentiality of credentials and the integrity and availability of the router's configuration.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical or local access to the device to trusted personnel only to mitigate risk from local attackers.