CVE-2014-2925

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
Configurations

Configuration 1 (hide)

cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*
cpe:2.3:o:asus:rt-ac68u_firmware:3.0.0.4.374_4887:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-22 13:06

Updated : 2024-02-28 12:20


NVD link : CVE-2014-2925

Mitre link : CVE-2014-2925

CVE.ORG link : CVE-2014-2925


JSON object : View

Products Affected

asus

  • rt-ac68u
  • rt-ac68u_firmware

t-mobile

  • tm-ac1900
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')