CVE-2020-29655

7.5 highEPSS 0.9%

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to influence the appearance of the login page, aka text injection.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2020-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

asus:rt-ac88u_firmware

References

https://vuldb.com/?id.165678
https://vuldb.com/?id.165678

Check your stack JSON