CVE-2021-41437

Опубликовано: 26 сент. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.

Ссылки

https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437
Patch
Third Party Advisory
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/
Patch
Product
Vendor Advisory
https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437
Patch
Third Party Advisory
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/
Patch
Product
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*

Версия до 3.0.0.4.388.20558 (исключая)

cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01205

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

GHSA-69p6-xm96-58f8