PT-2020-14461 · Asus · Asus Rt-Ac1900P

Published 2020-08-26 · Updated 2020-08-26 · CVE-2020-15499

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-AC1900P versions prior to 3.0.0.4.385 20253

Description An issue was discovered that allows XSS via spoofed Release Notes on the Firmware Upgrade page.

Recommendations For versions prior to 3.0.0.4.385 20253, update to version 3.0.0.4.385 20253 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-15499

Affected Products

Asus Rt-Ac1900P

References · 3

• https://osv.dev/vulnerability/CVE-2020-15499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15499 · Security Note
• https://trustwave.com/en-us/resources/security-resources/security-advisories/?fid=27440 · Note