ASUS Askey RTF8115VW Firmware vulnerabilities

2 CVEs affecting ASUS Askey RTF8115VW Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-27404, published 2021-02-19.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-27403, published 2021-02-19. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.
• CVE-2021-27404, published 2021-02-19. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header.