CVE-2020-15499: ASUS Rt-AC1900P Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page.

Affected products

• ASUS Rt-AC1900P Firmware: before 3.0.0.4.385.20253 (fixed in 3.0.0.4.385.20253)

Published 2020-08-26. Last modified 2026-06-17.