What’s Vulnerable › Vulnerabilities
CVE-2021-43702
- Severity: critical (CVSS 9.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-07-05 · updated 2026-06-17
- Weakness: CWE-79
Description
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Affected products
- ASUS 4G-Ac53U Firmware: 3.0.0.4.386.46061
- ASUS 4G-Ac68U Firmware: 3.0.0.4.386.46061
- ASUS Rog Rapture Gt-Ac2900 Firmware: 3.0.0.4.386.46061
- ASUS Rog Rapture Gt-Ac5300 Firmware: 3.0.0.4.386.46061
- ASUS Rog Rapture Gt-Ax11000 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1200 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1200E Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1200G+ Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1200G Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1200Gu Firmware: 3.0.0.4.386.46061
- ASUS Japan Inc. RT-AC1200HP: 3.0.0.4.386.46061
- ASUS Rt-Ac1300G+ Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1300Uhp Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1750 B1 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1750 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1900 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1900P Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac1900U Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac2200 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac2400 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac2600 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac2900 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac3100 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac3200 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac51U+ Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac51U Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac52U B1 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac5300 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac53 Firmware: 3.0.0.4.386.46061
- ASUS Rt-Ac55U Firmware: 3.0.0.4.386.46061
References
- https://www.asus.com/uk/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC88U/
- https://www.kroll.com/en/insights/publications/cyber/cve-2021-43702-from-discovery-to-patch
- https://www.asus.com/uk/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC88U/
- https://www.kroll.com/en/insights/publications/cyber/cve-2021-43702-from-discovery-to-patch
Get alerted when CVE-2021-43702 or the next vulnerability affects your stack