by Kastro
Paper/Archive/CVE-2021-43702

CVE-2021-43702

mitre — ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).

EPSS 1.0%CVSS 9.0
critical.is priorityof 100
39
CVSS 9.0 (NVD)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 62.1.621 × 2012.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

refasus.com/uk/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC88Urefkroll.com/en/insights/publications/cyber/cve-2021-43702-from-discovery-to-patch