Asus: >> Rt-Ac68u Firmware >> 3.0.0.4.374_4887 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
CVSS Score
4.3
EPSS Score
0.003
Published
2014-04-22
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
CVSS Score
6.3
EPSS Score
0.003
Published
2014-04-22
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
CVSS Score
8.5
EPSS Score
0.422
Published
2014-04-22
Page 2