Cross-Site Scripting Vulnerability in ASUS RT-AC1900P Routers
CVE-2020-15499

6.1MEDIUM

Key Information:

Vendor
Asus
Status
Rt-ac1900p Firmware
Vendor
CVE Published:
26 August 2020

Summary

The ASUS RT-AC1900P routers, prior to version 3.0.0.4.385_20253, exhibit a cross-site scripting (XSS) vulnerability that enables attackers to inject malicious scripts through spoofed Release Notes on the Firmware Upgrade interface. This flaw potentially allows unauthorized access to sensitive user data and malicious redirection to harmful sites.

References

https://www.trustwave.com/en-us/resources/security-resour...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.