CVE-2023-34941
MediumCVSS 5.4Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field.
Risk Assessment
This vulnerability may lead to the execution of malicious code on the user's device, posing a serious threat to data security and user privacy. It only affects products that are no longer supported by the maintainer.
Recommendation
It is recommended to avoid using vulnerable versions of the router and to migrate to newer models that are supported and updated by the manufacturer.
Original NVD description (English source)
A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.