Unscored severity · published Apr 22, 2014
CVE-2014-2925
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rt-ac68u · Asus
All versions, or not specified · source: NVD
RF
Rt-ac68u Firmware · Asus
through 3.0.0.4.374_4983; 3.0.0.4.374.4755; 3.0.0.4.374_4887 · source: NVD
TM
Tm-ac1900 · T-mobile
3.0.0.4.376_3169 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2925
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2925
Exploit
http://seclists.org/fulldisclosure/2014/Apr/59
support.asus.com
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
www.asus.com
http://www.asus.com/Networking/RTAC68U/HelpDesk_Download/
Exploit
http://www.securityfocus.com/bid/66669
support.t-mobile.com
https://support.t-mobile.com/docs/DOC-21994
More from Rt-ac68u
–
CVE-2014-7270
Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and…
–
CVE-2014-7269
ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware…
–
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to…
–
CVE-2013-5948
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to…