Medium severity6.5NVD Advisory· Published Sep 26, 2022· Updated Jun 17, 2026

CVE-2021-41437

Description

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Asus/Rt Ax88u Firmware
cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*
Range: <3.0.0.4.388.20558
Asus/RT-AX88Ucpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.0.0.4.388.20558

Patches

Vulnerability mechanics

References

github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437nvdPatchThird Party Advisory
www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/nvdPatchProductVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000