CRITICAL✓ PATCH🇬🇧 English

CVE-2021-43702

CVSS 9.0v3.1pub. 2022-07-05upd. 2024-11-21

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  • Asus Rog Rapture Gt Ac2900

    HW
    Asus
    wszystkie wersje

  • Asus Rog Rapture Gt Ac2900 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rog Rapture Gt Ac5300

    HW
    Asus
    wszystkie wersje

  • Asus Rog Rapture Gt Ac5300 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rog Rapture Gt Ax11000

    HW
    Asus
    wszystkie wersje

  • Asus Rog Rapture Gt Ax11000 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200e

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200e Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200g

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200g\+

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200g Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200g\+ Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200gu

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200gu Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1200hp

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1200hp Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1300g\+

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1300g\+ Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac1300uhp

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac1300uhp Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac2600

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac2600 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac2900

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac2900 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac3100

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac3100 Firmware

    OS
    Asus
    3.0.0.4.386.46061

  • Asus Rt Ac3200

    HW
    Asus
    wszystkie wersje

  • Asus Rt Ac3200 Firmware

    OS
    Asus
    3.0.0.4.386.46061
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2022-26376CRITICAL9.8ten sam produkt

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_4...

CVE-2022-26674CRITICAL9.8ten sam produkt

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to a...

CVE-2021-45756CRITICAL9.8ten sam produkt

Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blockin...

CVE-2021-41435CRITICAL9.8ten sam produkt

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-A...

CVE-2020-36109CRITICAL9.8ten sam produkt

ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cg...