CVE-2021-43702: XSS

Published Jul 5, 2022
·
Updated

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

Affected Software

186 affected components
ASUS Zenwifi Xd4s Firmware=3.0.0.4.386.46061
ASUS Zenwifi Xd4s
ASUS Zenwifi Xt9 Firmware=3.0.0.4.386.46061
ASUS Zenwifi Xt9
ASUS Zenwifi Xd5 Firmware=3.0.0.4.386.46061
ASUS Zenwifi Xd5
ASUS Zenwifi Pro Et12 Firmware=3.0.0.4.386.46061
ASUS Zenwifi Pro Et12
ASUS Zenwifi Pro Xt12 Firmware=3.0.0.4.386.46061
ASUS Zenwifi Pro Xt12
ASUS Zenwifi Ax Hybrid Firmware=3.0.0.4.386.46061
ASUS Zenwifi Ax Hybrid
ASUS Zenwifi Et8 Firmware=3.0.0.4.386.46061
ASUS Zenwifi Et8
ASUS Zenwifi Xd6 Firmware=3.0.0.4.386.46061
ASUS ZenWiFi XD6
ASUS Zenwifi Ac Mini Firmware=3.0.0.4.386.46061
ASUS Zenwifi Ac Mini
ASUS Zenwifi Ax Mini Firmware=3.0.0.4.386.46061
ASUS Zenwifi Ax Mini
ASUS Zenwifi Ax Firmware=3.0.0.4.386.46061
ASUS Zenwifi Ax
ASUS Zenwifi Ac Firmware=3.0.0.4.386.46061
ASUS Zenwifi Ac
ASUS Rt-ac66u B1 Firmware=3.0.0.4.386.46061
ASUS RT-AC66U B1
ASUS Rt-ax88u Firmware=3.0.0.4.386.46061
ASUS RT-AX88U
ASUS Rt-ax82u Firmware=3.0.0.4.386.46061
ASUS RT-AX82U
ASUS Rt-ax89x Firmware=3.0.0.4.386.46061
ASUS Rt-ax89x
ASUS Rt-ax92u Firmware=3.0.0.4.386.46061
ASUS RT-AX92U
ASUS Rt-ax86u Firmware=3.0.0.4.386.46061
ASUS RT-AX86U
ASUS Rt-ax68u Firmware=3.0.0.4.386.46061
ASUS RT-AX68U
ASUS RT-AX3000 firmware=3.0.0.4.386.46061
ASUS RT-AX3000
ASUS Rt-ax58u Firmware=3.0.0.4.386.46061
ASUS RT-AX58U
ASUS Rt-ax55 Firmware=3.0.0.4.386.46061
ASUS RT-AX55
ASUS Rt-ax56u Firmware=3.0.0.4.386.46061
ASUS RT-AX56U
ASUS Rt-ac66u\+ Firmware=3.0.0.4.386.46061
ASUS Rt-ac66u\+
ASUS Rog Rapture Gt-ac5300 Firmware=3.0.0.4.386.46061
ASUS Rog Rapture Gt-ac5300
ASUS Rog Rapture Gt-ax11000 Firmware=3.0.0.4.386.46061
ASUS Rog Rapture Gt-ax11000
ASUS Rog Rapture Gt-ac2900 Firmware=3.0.0.4.386.46061
ASUS Rog Rapture Gt-ac2900
ASUS Rt-ac1300uhp Firmware=3.0.0.4.386.46061
ASUS Rt-ac1300uhp
ASUS Rt-ac1300g\+ Firmware=3.0.0.4.386.46061
ASUS Rt-ac1300g\+
ASUS Tuf Gaming Ax5400 Firmware=3.0.0.4.386.46061
ASUS Tuf Gaming Ax5400
ASUS Tuf Gaming Ax3000 V2 Firmware=3.0.0.4.386.46061
ASUS Tuf Gaming Ax3000 V2
ASUS Rt-ac1200 Firmware=3.0.0.4.386.46061
ASUS RT-AC1200
ASUS Rt-ac5300 Firmware=3.0.0.4.386.46061
ASUS RT-AC5300
ASUS Rt-ac1200g Firmware=3.0.0.4.386.46061
ASUS Rt-ac1200g
ASUS RT-AC1200HP Firmware=3.0.0.4.386.46061
ASUS RT-AC1200HP
ASUS Rt-ac1200g\+ Firmware=3.0.0.4.386.46061
ASUS Rt-ac1200g\+
ASUS Rt-ac1200e Firmware=3.0.0.4.386.46061
ASUS Rt-ac1200e
ASUS Rt-ac1200gu Firmware=3.0.0.4.386.46061
ASUS Rt-ac1200gu
ASUS Rt-ac3100 Firmware=3.0.0.4.386.46061
ASUS RT-AC3100
ASUS Rt-ac58u Firmware=3.0.0.4.386.46061
ASUS RT-AC58U
ASUS Rt-ac88u Firmware=3.0.0.4.386.46061
ASUS RT-AC88U
ASUS Rt-ac56u Firmware=3.0.0.4.386.46061
ASUS Rt-ac56u
ASUS Rt-ac56r Firmware=3.0.0.4.386.46061
ASUS RT-AC56R
ASUS Rt-ac56s Firmware=3.0.0.4.386.46061
ASUS RT-AC56S
ASUS Rt-ac3200 Firmware=3.0.0.4.386.46061
ASUS RT-AC3200
ASUS Rt-ac55u Firmware=3.0.0.4.386.46061
ASUS RT-AC55U
ASUS Rt-ac2900 Firmware=3.0.0.4.386.46061
ASUS RT-AC2900
ASUS Rt-ac55uhp Firmware=3.0.0.4.386.46061
ASUS RT-AC55UHP
ASUS Rt-ac2600 Firmware=3.0.0.4.386.46061
ASUS Rt-ac2600
ASUS Rt-ac53 Firmware=3.0.0.4.386.46061
ASUS RT-AC53
ASUS Rt-ac2400 Firmware=3.0.0.4.386.46061
ASUS Rt-ac2400
ASUS Rt-ac52u B1 Firmware=3.0.0.4.386.46061
ASUS RT-AC52U B1
ASUS Rt-ac2200 Firmware=3.0.0.4.386.46061
ASUS Rt-ac2200
ASUS Rt-ac51u Firmware=3.0.0.4.386.46061
ASUS RT-AC51U
ASUS Rt-ac51u\+ Firmware=3.0.0.4.386.46061
ASUS Rt-ac51u\+
ASUS RT-AC87U Firmware=3.0.0.4.386.46061
ASUS RT-AC87U
ASUS Rt-ac87r Firmware=3.0.0.4.386.46061
ASUS Rt-ac87r
ASUS Rt-acrh17 Firmware=3.0.0.4.386.46061
ASUS Rt-acrh17
ASUS Rt-ac86u Firmware=3.0.0.4.386.46061
ASUS RT-AC86U
ASUS Rt-acrh13 Firmware=3.0.0.4.386.46061
ASUS RT-ACRH13
ASUS Rt-ac85u Firmware=3.0.0.4.386.46061
ASUS Rt-ac85u
ASUS Rt-n66u Firmware=3.0.0.4.386.46061
ASUS RT-N66U
ASUS Rt-n66r Firmware=3.0.0.4.386.46061
ASUS RT-N66R
ASUS Rt-n66w Firmware=3.0.0.4.386.46061
ASUS Rt-n66w
ASUS Rt-n66c1 Firmware=3.0.0.4.386.46061
ASUS Rt-n66c1
ASUS Rt-ac85p Firmware=3.0.0.4.386.46061
ASUS Rt-ac85p
ASUS Rt-n18u Firmware=3.0.0.4.386.46061
ASUS RT-N18U
ASUS Rt-ac65p Firmware=3.0.0.4.386.46061
ASUS Rt-ac65p
ASUS Rt-n19 Firmware=3.0.0.4.386.46061
ASUS Rt-n19
ASUS Rt-ac57u Firmware=3.0.0.4.386.46061
ASUS Rt-ac57u
ASUS Rt-n14uhp Firmware=3.0.0.4.386.46061
ASUS RT-N14UHP
ASUS RT-AC68U Firmware=3.0.0.4.386.46061
ASUS RT-AC68U
ASUS Rt-ac68r Firmware=3.0.0.4.386.46061
ASUS RT-AC68R
ASUS Rt-ac68p Firmware=3.0.0.4.386.46061
ASUS Rt-ac68p
ASUS Rt-ac68w Firmware=3.0.0.4.386.46061
ASUS Rt-ac68w
ASUS Rt-ac68uf Firmware=3.0.0.4.386.46061
ASUS Rt-ac68uf
ASUS Rt-n12e B1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12e B1
ASUS Rt-n12e C1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12e C1
ASUS Rt-ac65u Firmware=3.0.0.4.386.46061
ASUS Rt-ac65u
ASUS Rt-n12hp B1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12hp B1
ASUS Rt-ac1900 Firmware=3.0.0.4.386.46061
ASUS RT-AC1900
ASUS Rt-n12vp B1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12vp B1
ASUS Rt-ac1900p Firmware=3.0.0.4.386.46061
ASUS RT-AC1900P
ASUS Rt-ac1900u Firmware=3.0.0.4.386.46061
ASUS Rt-ac1900u
ASUS Rt-n12\+ B1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12\+ B1
ASUS Rt-ac1750 Firmware=3.0.0.4.386.46061
ASUS RT-AC1750
ASUS Rt-n12d1 Firmware=3.0.0.4.386.46061
ASUS Rt-n12d1
ASUS Rt-ac1750 B1 Firmware=3.0.0.4.386.46061
ASUS Rt-ac1750 B1
ASUS 4g-ac53u Firmware=3.0.0.4.386.46061
ASUS 4g-ac53u
ASUS Rt-ac66u Firmware=3.0.0.4.386.46061
ASUS RT-AC66U
ASUS Rt-ac66r Firmware=3.0.0.4.386.46061
ASUS RT-AC66R
ASUS Rt-ac66w Firmware=3.0.0.4.386.46061
ASUS Rt-ac66w
ASUS 4g-ac68u Firmware=3.0.0.4.386.46061
ASUS 4g-ac68u

Event History

Jul 5, 2022
CVE Published
via MITRE·11:50 AM
Data Sourced
via MITRE·11:50 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2021-43702?

CVE-2021-43702 has a high severity due to the potential for stored Cross Site Scripting (XSS) vulnerabilities.

2

How do I fix CVE-2021-43702?

To fix CVE-2021-43702, update your ASUS router firmware to the latest version provided by ASUS.

3

What devices are affected by CVE-2021-43702?

CVE-2021-43702 affects various ASUS router models running firmware version 3.0.0.4.386_45898 and related versions.

4

Can CVE-2021-43702 be exploited remotely?

Yes, CVE-2021-43702 can be exploited remotely if an attacker can manipulate the router's WiFi logs.

5

What are the potential consequences of CVE-2021-43702?

Exploitation of CVE-2021-43702 could allow an attacker to execute malicious scripts in the context of the user's browser.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203