CVE-2021-43702: ASUS 4g-AC53U Firmware

Critical severity, CVSS 9.0. EPSS: 1% chance of exploitation in the next 30 days.

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.

Affected products

• ASUS 4g-AC53U Firmware: version 3.0.0.4.386.46061 only
• ASUS 4g-AC68U Firmware: version 3.0.0.4.386.46061 only
• ASUS Rog Rapture Gt-AC2900 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rog Rapture Gt-AC5300 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rog Rapture Gt-AX11000 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200E Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200G+ Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200G Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200GU Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1200HP Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1300G+ Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1300UHP Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1750 b1 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1750 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1900 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1900P Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC1900U Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC2200 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC2400 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC2600 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC2900 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC3100 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC3200 Firmware: version 3.0.0.4.386.46061 only
• ASUS Rt-AC51U+ Firmware: version 3.0.0.4.386.46061 only
• and 68 more

Published 2022-07-05. Last modified 2026-06-17.