ASUS RT-N10E and RT-N12E Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the ASUS RT-N10E and RT-N12E routers, specifically in the 2.0.0.x firmware range. This vulnerability arises from inadequate input validation, allowing attackers to manipulate the SSID argument in the sysinfo.asp file. Exploitation of this issue could lead to the disclosure of sensitive information. It is important to note that all versions of the RT-N10E and RT-N12E are no longer supported, as they have reached End-of-Life (EOL).

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can mitigate this vulnerability by disabling remote access features from the Wide Area Network (WAN).