ASUS Rt-g32 Firmware vulnerabilities

2 CVEs affecting ASUS Rt-g32 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2681, published 2015-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2681, published 2015-03-23. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) next_page,…
CVE-2015-2676, published 2015-03-23. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the authentication of administrators for requests that…