First published: Tue Jan 28 2020(Updated: )
ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Asus Rt-ac66u Firmware | =3.0.0.4.372_67 | |
ASUS RT-AC66U |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-7997 is medium with a CVSS score of 6.1.
CVE-2020-7997 allows XSS attacks through the Client Name field of the Parental Control feature in ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices.
ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices are affected by CVE-2020-7997.
To fix the XSS vulnerability in ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices, it is recommended to update the firmware to the latest version provided by the vendor.
More information about CVE-2020-7997 can be found at the following reference: https://gist.github.com/adeshkolte/983bcadd82cc1fd60333098eb646ef68