ID
VAR-201602-0414
TITLE
ASUS RT-N56U HTML Injection Vulnerability
Trust: 1.5
DESCRIPTION
The ASUSRT-N56U has an HTML injection vulnerability that allows remote attackers to exploit malicious exploits to inject malicious scripts or HTML code to capture sensitive information or hijack user sessions when malicious data is viewed. ASUS RT-N56U is a wireless router product from ASUS. An HTML injection vulnerability exists in ASUS RT-N56U. When a user browses an affected website, their browser executes any HTML or script code provided by the attacker. This could lead to attackers stealing cookie-based authentication or controlling how the site is presented to users. Successful exploits will result in the execution of arbitrary attacker-supplied HTML and script code in the context of the affected application, potentially allowing the attacker to steal cookie-based authentication credentials or control how the page is rendered to the user. Other attacks are also possible
Trust: 1.35
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | asus | model: | rt-n56u | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
THREAT TYPE
remote
Trust: 0.6
TYPE
input validation
Trust: 0.6
EXTERNAL IDS
| db: | BID | id: | 82667 | Trust: 1.5 |
| db: | CNVD | id: | CNVD-2016-01255 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-201602-377 | Trust: 0.6 |
REFERENCES
| url: | http://www.securityfocus.com/bid/82667 | Trust: 1.2 |
| url: | http://www.asus.com/networking/rtn56u/ | Trust: 0.3 |
| url: | http://seclists.org/bugtraq/2016/feb/12 | Trust: 0.3 |
CREDITS
GraphX
Trust: 0.9
SOURCES
| db: | CNVD | id: | CNVD-2016-01255 |
| db: | BID | id: | 82667 |
| db: | CNNVD | id: | CNNVD-201602-377 |
LAST UPDATE DATE
2022-05-17T01:51:03.733000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2016-01255 | date: | 2016-02-24T00:00:00 |
| db: | BID | id: | 82667 | date: | 2016-07-06T12:16:00 |
| db: | CNNVD | id: | CNNVD-201602-377 | date: | 2016-02-19T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2016-01255 | date: | 2016-02-24T00:00:00 |
| db: | BID | id: | 82667 | date: | 2016-02-02T00:00:00 |
| db: | CNNVD | id: | CNNVD-201602-377 | date: | 2016-02-19T00:00:00 |