CVE-2020-29655
High
Description
An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to influence the appearance of the login page, aka text injection.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAsus Rt-ac88u Firmware
PublishedDec 9, 2020
First seenDec 9, 2020
How to fix
Update
- asus rt-ac88u_firmware3.1.0.108 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asus rt-ac88u_firmware | v < 3.1.0.108 | 3.1.0.108 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.