HTTP Response Splitting Vulnerability in ASUS RT-AX88U Router

CVE-2021-41437

Summary

The ASUS RT-AX88U router is vulnerable to an HTTP response splitting attack, allowing unauthorized access to an attacker's cloud storage. By crafting a specific URL, an authenticated user can inadvertently expose their data to malicious actors, thus compromising the integrity and confidentiality of sensitive information. This vulnerability affects all versions prior to v3.0.0.4.388.20558, emphasizing the need for users to update their firmware promptly to mitigate risks.

References