CVEvulnerability

CVE-2021-43702

9.0 CRITICAL Published 2022-07-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

Affected configurations

• asus zenwifi xd4s firmware 3.0.0.4.386.46061 • asus zenwifi xt9 firmware 3.0.0.4.386.46061 • asus zenwifi xd5 firmware 3.0.0.4.386.46061 • asus zenwifi pro et12 firmware 3.0.0.4.386.46061 • asus zenwifi pro xt12 firmware 3.0.0.4.386.46061 • asus zenwifi ax hybrid firmware 3.0.0.4.386.46061 • asus zenwifi et8 firmware 3.0.0.4.386.46061 • asus zenwifi xd6 firmware 3.0.0.4.386.46061 • asus zenwifi ac mini firmware 3.0.0.4.386.46061 • asus zenwifi ax mini firmware 3.0.0.4.386.46061 • asus zenwifi ax firmware 3.0.0.4.386.46061 • asus zenwifi ac firmware 3.0.0.4.386.46061 • asus rt-ac66u b1 firmware 3.0.0.4.386.46061 • asus rt-ax88u firmware 3.0.0.4.386.46061 • asus rt-ax82u firmware 3.0.0.4.386.46061 • asus rt-ax89x firmware 3.0.0.4.386.46061 • asus rt-ax92u firmware 3.0.0.4.386.46061 • asus rt-ax86u firmware 3.0.0.4.386.46061 • asus rt-ax68u firmware 3.0.0.4.386.46061 • asus rt-ax3000 firmware 3.0.0.4.386.46061 • asus rt-ax58u firmware 3.0.0.4.386.46061 • asus rt-ax55 firmware 3.0.0.4.386.46061 • asus rt-ax56u firmware 3.0.0.4.386.46061 • asus rt-ac66u\+ firmware 3.0.0.4.386.46061 • asus rog rapture gt-ac5300 firmware 3.0.0.4.386.46061 • asus rog rapture gt-ax11000 firmware 3.0.0.4.386.46061 • asus rog rapture gt-ac2900 firmware 3.0.0.4.386.46061 • asus rt-ac1300uhp firmware 3.0.0.4.386.46061 • asus rt-ac1300g\+ firmware 3.0.0.4.386.46061 • asus tuf gaming ax5400 firmware 3.0.0.4.386.46061 • asus tuf gaming ax3000 v2 firmware 3.0.0.4.386.46061 • asus rt-ac1200 firmware 3.0.0.4.386.46061 • asus rt-ac5300 firmware 3.0.0.4.386.46061 • asus rt-ac1200g firmware 3.0.0.4.386.46061 • asus rt-ac1200hp firmware 3.0.0.4.386.46061 • asus rt-ac1200g\+ firmware 3.0.0.4.386.46061 • asus rt-ac1200e firmware 3.0.0.4.386.46061 • asus rt-ac1200gu firmware 3.0.0.4.386.46061 • asus rt-ac3100 firmware 3.0.0.4.386.46061 • asus rt-ac58u firmware 3.0.0.4.386.46061 • asus rt-ac88u firmware 3.0.0.4.386.46061 • asus rt-ac56u firmware 3.0.0.4.386.46061 • asus rt-ac56r firmware 3.0.0.4.386.46061 • asus rt-ac56s firmware 3.0.0.4.386.46061 • asus rt-ac3200 firmware 3.0.0.4.386.46061 • asus rt-ac55u firmware 3.0.0.4.386.46061 • asus rt-ac2900 firmware 3.0.0.4.386.46061 • asus rt-ac55uhp firmware 3.0.0.4.386.46061 • asus rt-ac2600 firmware 3.0.0.4.386.46061 • asus rt-ac53 firmware 3.0.0.4.386.46061 • asus rt-ac2400 firmware 3.0.0.4.386.46061 • asus rt-ac52u b1 firmware 3.0.0.4.386.46061 • asus rt-ac2200 firmware 3.0.0.4.386.46061 • asus rt-ac51u firmware 3.0.0.4.386.46061 • asus rt-ac51u\+ firmware 3.0.0.4.386.46061 • asus rt-ac87u firmware 3.0.0.4.386.46061 • asus rt-ac87r firmware 3.0.0.4.386.46061 • asus rt-acrh17 firmware 3.0.0.4.386.46061 • asus rt-ac86u firmware 3.0.0.4.386.46061 • asus rt-acrh13 firmware 3.0.0.4.386.46061 … and 33 more

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References