Stored Cross-Site Scripting Vulnerability in Asus RT-N10LX Router
CVE-2023-34941

5.4MEDIUM

Key Information:

Vendor
Asus
Status
Rt-n10lx Firmware
Vendor
CVE Published:
12 June 2023

Summary

A stored cross-site scripting (XSS) vulnerability exists in the urlFilterList function of the Asus RT-N10LX Router version 2.0.0.39. This vulnerability permits attackers to execute arbitrary web scripts or HTML by injecting a malicious payload into the URL Keyword List text field. It is important to note that this issue affects only products that are no longer supported by the vendor, which increases the risk of exploitation.

References

https://github.com/OlivierLaflamme/cve/blob/main/ASUS-N10...

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.