CVE-2021-41437
MEDIUMAsus Rt-ax88u Firmware < 3.0.0.4.388.20558 - Injection
Title source: ruleDescription
An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.
References (2)
Core 2
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437
Patch, Product, Vendor Advisory x_refsource_confirm
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/
Scores
CVSS v3
6.5
EPSS
0.0120
EPSS Percentile
79.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-74
Status
published
Products (1)
asus/rt-ax88u_firmware
< 3.0.0.4.388.20558
Published
Sep 26, 2022
Tracked Since
Feb 18, 2026