Vulnerabilities > CVE-2023-34360 - Unspecified vulnerability in Asus Rt-Ax88U Firmware

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

asus

NVD

Published: 2023-07-31

Updated: 2024-11-21

Summary

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.

Vulnerable Configurations

Part	Description	Count
OS	Asus Asus RT Ax88U Firmware - Asus RT Ax88U Firmware 3.0.0.4.384.4730 Asus RT Ax88U Firmware 3.0.0.4.384.4736 Asus RT Ax88U Firmware 3.0.0.4.384.5247 Asus RT Ax88U Firmware 3.0.0.4.384.5329 Asus RT Ax88U Firmware 3.0.0.4.384.5640 Asus RT Ax88U Firmware 3.0.0.4.384.5951 Asus RT Ax88U Firmware 3.0.0.4.384.6210 Asus RT Ax88U Firmware 3.0.0.4.386.42095 Asus RT Ax88U Firmware 3.0.0.4.386.42819 Asus RT Ax88U Firmware 3.0.0.4.386.42820 Asus RT Ax88U Firmware 3.0.0.4.386.44266 Asus RT Ax88U Firmware 3.0.0.4.386.45375 Asus RT Ax88U Firmware 3.0.0.4.386.45898 Asus RT Ax88U Firmware 3.0.0.4.386.45934 Asus RT Ax88U Firmware 3.0.0.4.386.46061 Asus RT Ax88U Firmware 3.0.0.4.386.46065 Asus RT Ax88U Firmware 3.0.0.4.386.48631 Asus RT Ax88U Firmware 3.0.0.4.386.49674 Asus RT Ax88U Firmware 3.0.0.4.388.20499 Asus RT Ax88U Firmware 3.0.0.4.388.20518 Asus RT Ax88U Firmware 3.0.0.4.388.20558 Asus RT Ax88U Firmware 3.0.0.4.388.22525	23
Hardware	Asus Asus RT Ax88U -	1

Summary

Vulnerable Configurations

References