CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-43702

CVSS 9.0v3.1pub. 2022-07-05upd. 2024-11-21

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Asus Rog Rapture Gt Ac2900

    HW
    Asus
    all versions

  • Asus Rog Rapture Gt Ac2900 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rog Rapture Gt Ac5300

    HW
    Asus
    all versions

  • Asus Rog Rapture Gt Ac5300 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rog Rapture Gt Ax11000

    HW
    Asus
    all versions

  • Asus Rog Rapture Gt Ax11000 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200

    HW
    Asus
    all versions

  • Asus Rt Ac1200e

    HW
    Asus
    all versions

  • Asus Rt Ac1200e Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200g

    HW
    Asus
    all versions

  • Asus Rt Ac1200g\+

    HW
    Asus
    all versions

  • Asus Rt Ac1200g Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200g\+ Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200gu

    HW
    Asus
    all versions

  • Asus Rt Ac1200gu Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200hp

    HW
    Asus
    all versions

  • Asus Rt Ac1200hp Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1300g\+

    HW
    Asus
    all versions

  • Asus Rt Ac1300g\+ Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1300uhp

    HW
    Asus
    all versions

  • Asus Rt Ac1300uhp Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac2600

    HW
    Asus
    all versions

  • Asus Rt Ac2600 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac2900

    HW
    Asus
    all versions

  • Asus Rt Ac2900 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac3100

    HW
    Asus
    all versions

  • Asus Rt Ac3100 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac3200

    HW
    Asus
    all versions

  • Asus Rt Ac3200 Firmware

    OS
    Asus
    3.0.0.4.386.46061
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-26376CRITICAL9.8PL ✓same product

Uszkodzenie pamięci w module httpd routerów ASUS (Asuswrt/Asuswrt-Merlin)

CVE-2022-26674CRITICAL9.8PL ✓same product

Format String RCE w firmware ASUS RT-AX88U — nieautoryzowany dostęp zdalny

CVE-2021-45756CRITICAL9.8PL ✓same product

Buffer overflow w Asus RT-AC68U i RT-AC5300 (blocking_request.cgi)

CVE-2021-41435CRITICAL9.8PL ✓same product

Ominięcie ochrony brute-force w routerach ASUS z serii AX

CVE-2020-36109CRITICAL9.8PL ✓same product

Buffer overflow w ASUS RT-AX86U — RCE przez funkcję blocking_request.cgi