9
CVE-2021-43702
- EPSS 0.93%
- Veröffentlicht 05.07.2022 12:15:07
- Zuletzt bearbeitet 21.11.2024 06:29:39
- Erkennungen
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asus ≫ Zenwifi Xd4s Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Xt9 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Xd5 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Pro Et12 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Pro Xt12 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Ax Hybrid Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Et8 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Xd6 Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Ac Mini Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Ax Mini Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Ax Firmware Version 3.0.0.4.386.46061
Asus ≫ Zenwifi Ac Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac66u B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax88u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax82u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax89x Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax92u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax86u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax68u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax82u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax3000 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax58u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax55 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ax56u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac66u+ Firmware Version 3.0.0.4.386.46061
Asus ≫ Rog Rapture Gt-ac5300 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rog Rapture Gt-ax11000 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rog Rapture Gt-ac2900 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1300uhp Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1300g+ Firmware Version 3.0.0.4.386.46061
Asus ≫ Tuf Gaming Ax5400 Firmware Version 3.0.0.4.386.46061
Asus ≫ Tuf Gaming Ax3000 V2 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac5300 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200g Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200hp Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200g+ Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200e Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1200gu Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac3100 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac58u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac88u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac56u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac56r Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac56s Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac3200 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac55u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac2900 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac55uhp Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac2600 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac53 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac2400 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac52u B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac2200 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac51u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac51u+ Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac87u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac87r Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-acrh17 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac86u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-acrh13 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac85u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n66u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n66r Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n66w Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n66c1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac85p Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n18u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac65p Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n19 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac57u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n14uhp Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac68u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac68r Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac68p Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac68w Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac68uf Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12e B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12e C1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac65u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12hp B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1900 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12vp B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1900p Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1900u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12+ B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1750 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-n12d1 Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac1750 B1 Firmware Version 3.0.0.4.386.46061
Asus ≫ 4g-ac53u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac66r Firmware Version 3.0.0.4.386.46061
Asus ≫ Rt-ac66w Firmware Version 3.0.0.4.386.46061
Asus ≫ 4g-ac68u Firmware Version 3.0.0.4.386.46061
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.93% | 0.568 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9 | 2.3 | 6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
|
| NIST | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
https://www.asus.com/uk/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC88U/
https://www.kroll.com/en/insights/publications/cyber/cve-2021-43702-from-discovery-to-patch