Asus » Rt-g32 Firmware : Security Vulnerabilities, CVEs, Published In 2015
Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) next_page, (2) group_id, (3) action_script, or (4) flag parameter to start_apply.htm.
Max CVSS
4.3
EPSS Score
0.51%
Published
2015-03-23
Updated
2016-12-03
Cross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm.
Max CVSS
6.8
EPSS Score
0.73%
Published
2015-03-23
Updated
2016-12-03
2 vulnerabilities found