CVE-2017-12590: XSS
First published: Fri Mar 16 2018(Updated: )
ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the "flag" parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Asus Rt-n14uhp Firmware | <3.0.0.4.380.8015 | |
| ASUS RT-N14UHP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for ASUS RT-N14UHP devices?
The vulnerability ID for ASUS RT-N14UHP devices is CVE-2017-12590.
What is the title of the vulnerability?
The title of the vulnerability is 'ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflected XSS vulnerability in the flag parameter.'
What is the severity of CVE-2017-12590?
The severity of CVE-2017-12590 is medium with a severity value of 6.1.
How does the vulnerability impact ASUS RT-N14UHP devices?
The vulnerability allows for reflected cross-site scripting (XSS) attacks via the 'flag' parameter, which could lead to unauthorized access to sensitive information or the execution of malicious code.
How can I fix the ASUS RT-N14UHP vulnerability?
To fix the vulnerability, it is recommended to update the firmware of the device to version 3.0.0.4.380.8015 or later, which resolves the reflected XSS vulnerability.
- collector/nvd-index
- vendor/asus
- canonical/asus rt-n14uhp firmware
- canonical/asus rt-n14uhp