asus Vulnerability Advisory Catalog

Total 265 security vulnerabilities recorded for asus software and firmware.

← Back to All Vendors
CVE-2017-5632 MEDIUM
Component: rt-n56u_firmware

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP ad...

📅 2017-01-30
CVSS 6.5 Dossier →
CVE-2015-7790 MEDIUM
Component: wl-330nul_firmware

Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web...

📅 2015-12-30
CVSS 6.1 Dossier →
CVE-2015-7789 MEDIUM
Component: wl-33nul_firmware

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspecified vectors....

📅 2015-12-30
CVSS 4.3 Dossier →
Component: wl-330nul_firmware

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unspecified vectors....

📅 2015-12-30
CVSS 7.3 Dossier →
CVE-2015-7787 MEDIUM
Component: wl-330nul_firmware

ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase via unspecified vectors....

📅 2015-12-30
CVSS 4.3 Dossier →
CVE-2015-6949 UNKNOWN
Component: tm-1900

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values....

📅 2015-09-15
CVSS 9.3 Dossier →
CVE-2015-2681 UNKNOWN
Component: rt-g32_firmware

Multiple cross-site scripting (XSS) vulnerabilities in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allow remote attackers to inject arbi...

📅 2015-03-23
CVSS 4.3 Dossier →
CVE-2015-2676 UNKNOWN
Component: rt-g32_firmware

Cross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 routers with firmware 2.0.2.6 and 2.0.3.2 allows remote attackers to hijack the aut...

📅 2015-03-23
CVSS 6.8 Dossier →
CVE-2015-1437 UNKNOWN
Component: rt-n10\+d1_firmware

Multiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote attackers to inject arbitrary web ...

📅 2015-02-04
CVSS 4.3 Dossier →
CVE-2014-7270 UNKNOWN
Component: rt-n66u_firmware

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmw...

📅 2015-02-01
CVSS 6.8 Dossier →
CVE-2014-7269 UNKNOWN
Component: rt-n66u_firmware

ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers ...

📅 2015-02-01
CVSS 6.5 Dossier →
CVE-2014-2719 UNKNOWN
Component: rt-ac66u_firmware

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remot...

📅 2014-04-22
CVSS 6.3 Dossier →
CVE-2013-6343 UNKNOWN
Component: tm-ac1900_firmware

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute a...

📅 2014-01-22
CVSS 10.0 Dossier →
CVE-2013-7293 UNKNOWN
Component: wl-330nul

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to inst...

📅 2014-01-15
CVSS 5.0 Dossier →
CVE-2013-3610 UNKNOWN
Component: rt-n10e_firmware

qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover...

📅 2013-10-05
CVSS 6.1 Dossier →
CVE-2013-4937 UNKNOWN
Component: rt-ac66u_firmware

Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmwa...

📅 2013-07-26
CVSS 10.0 Dossier →
CVE-2012-4924 UNKNOWN
Component: ipswcom_activex_component

Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execut...

📅 2012-09-15
CVSS 9.3 Dossier →
CVE-2011-4497 UNKNOWN
Component: rt-n56u_firmware

QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect...

📅 2011-11-21
CVSS 3.3 Dossier →
CVE-2009-3093 UNKNOWN
Component: asus_wl-500w

Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in Vul...

📅 2009-09-08
CVSS 10.0 Dossier →
CVE-2009-3092 UNKNOWN
Component: asus_wl-500w

Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pac...

📅 2009-09-08
CVSS 10.0 Dossier →
CVE-2009-3091 UNKNOWN
Component: asus_wl-330ge

Unspecified vulnerability on the ASUS WL-330gE has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Pro...

📅 2009-09-08
CVSS 10.0 Dossier →
CVE-2009-0656 UNKNOWN
Component: smartlogon

Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass "security functions" by presenting an image with a modified viewpoint that ma...

📅 2009-02-20
CVSS 6.9 Dossier →
CVE-2008-1491 UNKNOWN
Component: remote_console

Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attac...

📅 2008-03-25
CVSS 10.0 Dossier →
CVE-2005-3490 UNKNOWN
Component: video_security_online

Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via ".....

📅 2005-11-04
CVSS 5.0 Dossier →
Page 11 of 12 (265 Total Records)