CVE-2021-43702 - CVE House
Back to Database
Status published Critical CVE-2021-43702

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS)....

Vulnerability Description

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-43702

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

zenwifi xd4s firmware, zenwifi xt9 firmware, zenwifi xd5 firmware, zenwifi pro et12 firmware, zenwifi pro xt12 firmware, zenwifi ax hybrid firmware, zenwifi et8 firmware, zenwifi xd6 firmware, zenwifi ac mini firmware, zenwifi ax mini firmware, zenwifi ax firmware, zenwifi ac firmware, rt-ac66u b1 firmware, rt-ax88u firmware, rt-ax82u firmware, rt-ax89x firmware, rt-ax92u firmware, rt-ax86u firmware, rt-ax68u firmware, rt-ax3000 firmware, rt-ax58u firmware, rt-ax55 firmware, rt-ax56u firmware, rt-ac66u\+ firmware, rog rapture gt-ac5300 firmware, rog rapture gt-ax11000 firmware, rog rapture gt-ac2900 firmware, rt-ac1300uhp firmware, rt-ac1300g\+ firmware, tuf gaming ax5400 firmware, tuf gaming ax3000 v2 firmware, rt-ac1200 firmware, rt-ac5300 firmware, rt-ac1200g firmware, rt-ac1200hp firmware, rt-ac1200g\+ firmware, rt-ac1200e firmware, rt-ac1200gu firmware, rt-ac3100 firmware, rt-ac58u firmware, rt-ac88u firmware, rt-ac56u firmware, rt-ac56r firmware, rt-ac56s firmware, rt-ac3200 firmware, rt-ac55u firmware, rt-ac2900 firmware, rt-ac55uhp firmware, rt-ac2600 firmware, rt-ac53 firmware, rt-ac2400 firmware, rt-ac52u b1 firmware, rt-ac2200 firmware, rt-ac51u firmware, rt-ac51u\+ firmware, rt-ac87u firmware, rt-ac87r firmware, rt-acrh17 firmware, rt-ac86u firmware, rt-acrh13 firmware, rt-ac85u firmware, rt-n66u firmware, rt-n66r firmware, rt-n66w firmware, rt-n66c1 firmware, rt-ac85p firmware, rt-n18u firmware, rt-ac65p firmware, rt-n19 firmware, rt-ac57u firmware, rt-n14uhp firmware, rt-ac68u firmware, rt-ac68r firmware, rt-ac68p firmware, rt-ac68w firmware, rt-ac68uf firmware, rt-n12e b1 firmware, rt-n12e c1 firmware, rt-ac65u firmware, rt-n12hp b1 firmware, rt-ac1900 firmware, rt-n12vp b1 firmware, rt-ac1900p firmware, rt-ac1900u firmware, rt-n12\+ b1 firmware, rt-ac1750 firmware, rt-n12d1 firmware, rt-ac1750 b1 firmware, 4g-ac53u firmware, rt-ac66u firmware, rt-ac66r firmware, rt-ac66w firmware, 4g-ac68u firmware
Vulnerable Versions:
3.0.0.4.386.46061

Timeline

Official Publish: July 5th, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.