CVE-2021-43702
Critical
Description
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
SeverityCritical
CVSS9.0
Exploit probability—
ProductAsus Zenwifi Xd4s Firmware
PublishedJul 5, 2022
First seenJul 5, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asus zenwifi_xd4s_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_xt9_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_xd5_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_pro_et12_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi__pro_xt12_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_ax_hybrid_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_et8_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_xd6_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_ac_mini_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_ax_mini_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_ax_firmware | 3.0.0.4.386.46061 | — |
| asus zenwifi_ac_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac66u_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax88u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax82u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax89x_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax92u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax86u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax68u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax3000_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax58u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax55_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ax56u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac66u\+_firmware | 3.0.0.4.386.46061 | — |
| asus rog_rapture_gt-ac5300_firmware | 3.0.0.4.386.46061 | — |
| asus rog_rapture_gt-ax11000_firmware | 3.0.0.4.386.46061 | — |
| asus rog_rapture_gt-ac2900_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1300uhp_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1300g\+_firmware | 3.0.0.4.386.46061 | — |
| asus tuf_gaming_ax5400_firmware | 3.0.0.4.386.46061 | — |
| asus tuf_gaming_ax3000_v2_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac5300_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200g_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200hp_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200g\+_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200e_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1200gu_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac3100_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac58u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac88u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac56u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac56r_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac56s_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac3200_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac55u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac2900_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac55uhp_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac2600_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac53_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac2400_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac52u_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac2200_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac51u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac51u\+_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac87u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac87r_firmware | 3.0.0.4.386.46061 | — |
| asus rt-acrh17_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac86u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-acrh13_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac85u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n66u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n66r_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n66w_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n66c1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac85p_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n18u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac65p_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n19_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac57u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n14uhp_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac68u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac68r_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac68p_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac68w_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac68uf_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12e_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12e_c1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac65u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12hp_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1900_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12vp_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1900p_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1900u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12\+_b1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1750_firmware | 3.0.0.4.386.46061 | — |
| asus rt-n12d1_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac1750_b1__firmware | 3.0.0.4.386.46061 | — |
| asus 4g-ac53u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac66u_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac66r_firmware | 3.0.0.4.386.46061 | — |
| asus rt-ac66w_firmware | 3.0.0.4.386.46061 | — |
| asus 4g-ac68u_firmware | 3.0.0.4.386.46061 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.