CVE-2014-2925

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
Configurations

Configuration 1 (hide)

cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4887:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*

History

21 Nov 2024, 02:07

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2014/Apr/59 - Exploit () http://seclists.org/fulldisclosure/2014/Apr/59 - Exploit
References () http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 - () http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29 -
References () http://www.asus.com/Networking/RTAC68U/HelpDesk_Download/ - () http://www.asus.com/Networking/RTAC68U/HelpDesk_Download/ -
References () http://www.securityfocus.com/bid/66669 - Exploit () http://www.securityfocus.com/bid/66669 - Exploit
References () https://support.t-mobile.com/docs/DOC-21994 - () https://support.t-mobile.com/docs/DOC-21994 -

Information

Published : 2014-04-22 13:06

Updated : 2024-11-21 02:07


NVD link : CVE-2014-2925

Mitre link : CVE-2014-2925

CVE.ORG link : CVE-2014-2925


JSON object : View

Products Affected

asus

  • rt-ac68u
  • rt-ac68u_firmware

t-mobile

  • tm-ac1900
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')