CVE-2018-18291: XSS

Published Oct 14, 2018

Updated

A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.3806516 devices allows remote attackers to inject arbitrary web script or HTML via AdvancedASUSDDNSContent.asp, AdvancedWSecurityContent.asp, AdvancedWirelessContent.asp, Logout.asp, MainLogin.asp, MobileQISLogin.asp, QISwizard.htma, YandexDNS.asp, ajaxstatus.xml, apply.cgi, clients.asp, disk.asp, diskutility.asp, or internet.asp.

Affected Software

2 affected components

ASUS Rt-ac58u Firmware=3.0.0.4.380.6516

ASUS RT-AC58U

Event History

Oct 14, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-18291?

The severity of CVE-2018-18291 is medium with a CVSS score of 6.1.

What is the affected software of CVE-2018-18291?

The affected software of CVE-2018-18291 is ASUS RT-AC58U firmware version 3.0.0.4.380_6516.

How does CVE-2018-18291 work?

CVE-2018-18291 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.

Is ASUS RT-AC58U vulnerable to CVE-2018-18291?

Yes, ASUS RT-AC58U with firmware version 3.0.0.4.380_6516 is vulnerable to CVE-2018-18291.

How can I fix CVE-2018-18291?

To fix CVE-2018-18291, update your ASUS RT-AC58U firmware to a version that is not vulnerable.

CVE-2018-18291: XSS

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2018-18291?

What is the affected software of CVE-2018-18291?

How does CVE-2018-18291 work?

Is ASUS RT-AC58U vulnerable to CVE-2018-18291?

How can I fix CVE-2018-18291?

Company

Resources

Contact