asus Vulnerability Advisory Catalog

Total 265 security vulnerabilities recorded for asus software and firmware.

← Back to All Vendors
Component: rt-ac86u_firmware

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user ...

šŸ“… 2023-09-07
CVSS 8.8 Dossier →
Component: rt-ac86u_firmware

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege ...

šŸ“… 2023-09-07
CVSS 8.8 Dossier →
Component: rt-ac86u_firmware

ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can ...

šŸ“… 2023-09-07
CVSS 8.8 Dossier →
Component: rt-ac66u_b1_firmware

ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext....

šŸ“… 2023-08-08
CVSS 7.5 Dossier →
Component: rt-ax88u_firmware

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4...

šŸ“… 2023-07-31
CVSS 8.2 Dossier →
Component: rt-ax88u_firmware

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which cause...

šŸ“… 2023-07-31
CVSS 7.5 Dossier →
Component: rt-ax88u_firmware

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contain...

šŸ“… 2023-07-31
CVSS 7.5 Dossier →
Component: armoury_crate

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch proc...

šŸ“… 2023-07-26
CVSS 7.8 Dossier →
CVE-2023-35087 CRITICAL
Component: rt-ac86u_firmware

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific valu...

šŸ“… 2023-07-21
CVSS 9.8 Dossier →
Component: rt-ac86u_firmware

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format strin...

šŸ“… 2023-07-21
CVSS 7.2 Dossier →
Component: rt-ax3000_firmware

ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a positio...

šŸ“… 2023-06-13
CVSS 5.3 Dossier →
Component: rt-n10lx_firmware

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only af...

šŸ“… 2023-06-12
CVSS 7.5 Dossier →
Component: rt-n10lx_firmware

A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrar...

šŸ“… 2023-06-12
CVSS 5.4 Dossier →
Component: rt-n10lx_firmware

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only af...

šŸ“… 2023-06-12
CVSS 7.5 Dossier →
Component: rt-ac86u_firmware

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length....

šŸ“… 2023-06-02
CVSS 7.2 Dossier →
Component: rt-ac86u_firmware

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this v...

šŸ“… 2023-06-02
CVSS 8.8 Dossier →
Component: rt-ac51u_firmware

A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware ve...

šŸ“… 2023-05-02
CVSS 5.2 Dossier →
CVE-2023-26602 CRITICAL
Component: asmb8-ikvm_firmware

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmp...

šŸ“… 2023-02-26
CVSS 9.8 Dossier →
Component: armoury_crate

ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS sof...

šŸ“… 2023-02-15
CVSS 7.8 Dossier →
CVE-2021-37317 CRITICAL
Component: rt-ac68u_firmware

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arb...

šŸ“… 2023-02-03
CVSS 9.1 Dossier →
Component: rt-ac68u_firmware

SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive ...

šŸ“… 2023-02-03
CVSS 7.5 Dossier →
CVE-2021-37315 CRITICAL
Component: rt-ac68u_firmware

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to wr...

šŸ“… 2023-02-03
CVSS 9.1 Dossier →
Component: rt-ax82u_firmware

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's confi...

šŸ“… 2023-01-10
CVSS 7.5 Dossier →
Component: rt-ax82u_firmware

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration servi...

šŸ“… 2023-01-10
CVSS 7.5 Dossier →
Page 2 of 12 (265 Total Records)