CVE-2021-41437: An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an…

PriorityP432medium6.5CVSS 3.1

AVNACLPRNUIRSUCHINAN

EPSS

0.86%

54.3th percentile

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ax88u_firmware	< 3.0.0.4.388.20558	3.0.0.4.388.20558

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.