ASUS Rt-n10lx Firmware vulnerabilities

3 CVEs affecting ASUS Rt-n10lx Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-34942, published 2023-06-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-34941, published 2023-06-12. Medium severity, CVSS 5.4. EPSS: 23.8% chance of exploitation in the next 30 days. A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2023-34940, published 2023-06-12. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by…
CVE-2023-34942, published 2023-06-12. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by…