CVE-2017-6547: XSS
Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6547?
CVE-2017-6547 is classified as a medium severity cross-site scripting (XSS) vulnerability affecting multiple ASUS routers.
How do I fix CVE-2017-6547?
To fix CVE-2017-6547, update the firmware of your affected ASUS router to the latest version provided by ASUS.
Which devices are affected by CVE-2017-6547?
CVE-2017-6547 affects several ASUS router models including RT-N56U, RT-N66U, and RT-AC66U among others.
What type of vulnerability is CVE-2017-6547?
CVE-2017-6547 is a cross-site scripting (XSS) vulnerability that can allow attackers to execute scripts in the context of a user's session.
Is CVE-2017-6547 easy to exploit?
CVE-2017-6547 can potentially be exploited by attackers who can manipulate user input on affected ASUS routers.