CVE-2023-34360: falha de alta gravidade em ASUS RT-AX88U
ASUS RT-AX88U - Stored XSS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.2epss 0.5%
A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Produtos afetados
ASUS · RT-AX88UCVEs relacionadas — ASUS RT-AX88U
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3080CRITICALASUS Router - Improper AuthenticationEPSS 43.5%CVE-2022-26674CRITICALASUS RT-AX88U - Format StringEPSS 2.8%CVE-2023-41349HIGHASUS RT-AX88U - externally-controlled format stringEPSS 0.9%CVE-2024-3079HIGHASUS Router - Stack-based Buffer OverflowEPSS 0.8%CVE-2023-34359HIGHASUS RT-AX88U - Out-of-bounds Read - 2EPSS 0.8%CVE-2023-34358HIGHASUS RT-AX88U - Out-of-bounds Read - 1EPSS 0.8%