CVE-2021-41437: Medium severity asus rt-ax88u firmware vulnerability
An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-41437?
CVE-2021-41437 is an HTTP response splitting attack in the web application in ASUS RT-AX88U before v3.0.0.4.388.20558 firmware, allowing an attacker to craft a specific URL to gain access to the cloud storage of the victim.
How does CVE-2021-41437 work?
CVE-2021-41437 works by exploiting a vulnerability in the web application of ASUS RT-AX88U, where an attacker can create a malicious URL that, when visited by an authenticated victim, grants access to the attacker's cloud storage.
What is the severity of CVE-2021-41437?
CVE-2021-41437 has a severity score of 6.5, which is considered medium.
Which versions of ASUS RT-AX88U firmware are affected by CVE-2021-41437?
ASUS RT-AX88U firmware versions before v3.0.0.4.388.20558 are affected by CVE-2021-41437.
How can I fix CVE-2021-41437?
To fix CVE-2021-41437, it is recommended to update the firmware of ASUS RT-AX88U to v3.0.0.4.388.20558 or later.