Vulnerability Intelligence Report
CVE-2021-43702
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
No Active Exploit Signals
CVSS Base Score
9.0
CRITICAL
EPSS Probability:0.83%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asus | zenwifi_xd4s_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_xd4s | all |
| asus | zenwifi_xt9_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_xt9 | all |
| asus | zenwifi_xd5_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_xd5 | all |
| asus | zenwifi_pro_et12_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_pro_et12 | all |
| asus | zenwifi__pro_xt12_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi__pro_xt12 | all |
| asus | zenwifi_ax_hybrid_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_ax_hybrid | all |
| asus | zenwifi_et8_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_et8 | all |
| asus | zenwifi_xd6_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_xd6 | all |
| asus | zenwifi_ac_mini_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_ac_mini | all |
| asus | zenwifi_ax_mini_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_ax_mini | all |
| asus | zenwifi_ax_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_ax | all |
| asus | zenwifi_ac_firmware | 3.0.0.4.386.46061 |
| asus | zenwifi_ac | all |
| asus | rt-ac66u_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac66u_b1 | all |
| asus | rt-ax88u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax88u | all |
| asus | rt-ax82u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax82u | all |
| asus | rt-ax89x_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax89x | all |
| asus | rt-ax92u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax92u | all |
| asus | rt-ax86u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax86u | all |
| asus | rt-ax68u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax68u | all |
| asus | rt-ax3000_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax3000 | all |
| asus | rt-ax58u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax58u | all |
| asus | rt-ax55_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax55 | all |
| asus | rt-ax56u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ax56u | all |
| asus | rt-ac66u\+_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac66u\+ | all |
| asus | rog_rapture_gt-ac5300_firmware | 3.0.0.4.386.46061 |
| asus | rog_rapture_gt-ac5300 | all |
| asus | rog_rapture_gt-ax11000_firmware | 3.0.0.4.386.46061 |
| asus | rog_rapture_gt-ax11000 | all |
| asus | rog_rapture_gt-ac2900_firmware | 3.0.0.4.386.46061 |
| asus | rog_rapture_gt-ac2900 | all |
| asus | rt-ac1300uhp_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1300uhp | all |
| asus | rt-ac1300g\+_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1300g\+ | all |
| asus | tuf_gaming_ax5400_firmware | 3.0.0.4.386.46061 |
| asus | tuf_gaming_ax5400 | all |
| asus | tuf_gaming_ax3000_v2_firmware | 3.0.0.4.386.46061 |
| asus | tuf_gaming_ax3000_v2 | all |
| asus | rt-ac1200_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200 | all |
| asus | rt-ac5300_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac5300 | all |
| asus | rt-ac1200g_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200g | all |
| asus | rt-ac1200hp_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200hp | all |
| asus | rt-ac1200g\+_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200g\+ | all |
| asus | rt-ac1200e_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200e | all |
| asus | rt-ac1200gu_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1200gu | all |
| asus | rt-ac3100_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac3100 | all |
| asus | rt-ac58u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac58u | all |
| asus | rt-ac88u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac88u | all |
| asus | rt-ac56u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac56u | all |
| asus | rt-ac56r_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac56r | all |
| asus | rt-ac56s_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac56s | all |
| asus | rt-ac3200_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac3200 | all |
| asus | rt-ac55u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac55u | all |
| asus | rt-ac2900_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac2900 | all |
| asus | rt-ac55uhp_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac55uhp | all |
| asus | rt-ac2600_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac2600 | all |
| asus | rt-ac53_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac53 | all |
| asus | rt-ac2400_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac2400 | all |
| asus | rt-ac52u_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac52u_b1 | all |
| asus | rt-ac2200_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac2200 | all |
| asus | rt-ac51u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac51u | all |
| asus | rt-ac51u\+_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac51u\+ | all |
| asus | rt-ac87u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac87u | all |
| asus | rt-ac87r_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac87r | all |
| asus | rt-acrh17_firmware | 3.0.0.4.386.46061 |
| asus | rt-acrh17 | all |
| asus | rt-ac86u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac86u | all |
| asus | rt-acrh13_firmware | 3.0.0.4.386.46061 |
| asus | rt-acrh13 | all |
| asus | rt-ac85u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac85u | all |
| asus | rt-n66u_firmware | 3.0.0.4.386.46061 |
| asus | rt-n66u | all |
| asus | rt-n66r_firmware | 3.0.0.4.386.46061 |
| asus | rt-n66r | all |
| asus | rt-n66w_firmware | 3.0.0.4.386.46061 |
| asus | rt-n66w | all |
| asus | rt-n66c1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n66c1 | all |
| asus | rt-ac85p_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac85p | all |
| asus | rt-n18u_firmware | 3.0.0.4.386.46061 |
| asus | rt-n18u | all |
| asus | rt-ac65p_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac65p | all |
| asus | rt-n19_firmware | 3.0.0.4.386.46061 |
| asus | rt-n19 | all |
| asus | rt-ac57u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac57u | all |
| asus | rt-n14uhp_firmware | 3.0.0.4.386.46061 |
| asus | rt-n14uhp | all |
| asus | rt-ac68u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac68u | all |
| asus | rt-ac68r_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac68r | all |
| asus | rt-ac68p_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac68p | all |
| asus | rt-ac68w_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac68w | all |
| asus | rt-ac68uf_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac68uf | all |
| asus | rt-n12e_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12e_b1 | all |
| asus | rt-n12e_c1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12e_c1 | all |
| asus | rt-ac65u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac65u | all |
| asus | rt-n12hp_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12hp_b1 | all |
| asus | rt-ac1900_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1900 | all |
| asus | rt-n12vp_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12vp_b1 | all |
| asus | rt-ac1900p_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1900p | all |
| asus | rt-ac1900u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1900u | all |
| asus | rt-n12\+_b1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12\+_b1 | all |
| asus | rt-ac1750_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1750 | all |
| asus | rt-n12d1_firmware | 3.0.0.4.386.46061 |
| asus | rt-n12d1 | all |
| asus | rt-ac1750_b1__firmware | 3.0.0.4.386.46061 |
| asus | rt-ac1750_b1_ | all |
| asus | 4g-ac53u_firmware | 3.0.0.4.386.46061 |
| asus | 4g-ac53u | all |
| asus | rt-ac66u_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac66u | all |
| asus | rt-ac66r_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac66r | all |
| asus | rt-ac66w_firmware | 3.0.0.4.386.46061 |
| asus | rt-ac66w | all |
| asus | 4g-ac68u_firmware | 3.0.0.4.386.46061 |
| asus | 4g-ac68u | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.834%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-11-15T00:00:00 |
| Published | 2022-07-05T11:50:03 |
| Last Updated | 2024-08-04T04:03:08 |
Community Chatter & Buzz