Lucene search
HistoryApr 22, 2014 - 1:06 p.m.
CVE-2014-2925
cve-2014-2925
cross-site scripting
xss
asus
routers
firmware
vulnerability
security
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.2%
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
Affected configurations
Node
t-mobiletm-ac1900Match3.0.0.4.376_3169
Node
asusrt-ac68u_firmwareRange≤3.0.0.4.374_4983
ORasusrt-ac68u_firmwareMatch3.0.0.4.374.4755
ORasusrt-ac68u_firmwareMatch3.0.0.4.374_4887
asusrt-ac68uMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| t-mobile:tm-ac1900 | t-mobile tm-ac1900 | eq | 3.0.0.4.376_3169 |
Related
cvelist
cvelist
CVE-2014-2925
2014-04-21 14:00:00
nvd
nvd
CVE-2014-2925
2014-04-22 13:06:30
prion
prion
Cross site scripting
2014-04-22 13:06:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.2%
Related for CVE-2014-2925