CVE-2014-2925 Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| t-mobile tm-ac1900 | = 3.0.0.4.376_3169 | No fix listed |
| ASUS rt-ac68u firmware | <= 3.0.0.4.374_4983 | No fix listed |
| ASUS rt-ac68u firmware | = 3.0.0.4.374.4755 | No fix listed |
| ASUS rt-ac68u firmware | = 3.0.0.4.374_4887 | No fix listed |
| ASUS rt-ac68u | All versions | No fix listed |
References
- 20140404 Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface exploit mailing-list
- support.asus.com
- www.asus.com
- 66669 exploit vdb-entry
- support.t-mobile.com