| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | The vulnerability of the “networkmap” component in ASUS’s microprogramming router software allows a hacker to execute arbitrary code. | 14 Dec 201700:00 | – | bdu_fstec |
 | CVE-2017-6548 | 26 Jul 202607:02 | – | circl |
 | CVE-2017-6548 | 9 Mar 201709:26 | – | cvelist |
 | ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution | 8 Mar 201700:00 | – | exploitdb |
 | ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution | 8 Mar 201700:00 | – | exploitpack |
 | CVE-2017-6548 | 9 Mar 201709:59 | – | nvd |
 | CVE-2017-6548 | 9 Mar 201709:59 | – | osv |
 | Buffer overflow | 9 Mar 201709:59 | – | prion |
 | ASUSWRT - Multiple Vulnerabilities | 10 Mar 201700:00 | – | seebug |
Node
AND
| Source | Link |
|---|---|
| asuswrt | www.asuswrt.lostrealm.ca/changelog |
| exploit-db | www.exploit-db.com/exploits/41573/ |
| securityfocus | www.securityfocus.com/bid/96938 |
| bierbaumer | www.bierbaumer.net/security/asuswrt/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| flag | query param | /cloud_sync.asp?flag= | XSS via long file path redirection in httpd handle_request when file name > 50 chars. | |
| asus_token | header | /syslog.txt | Session hijacking via crafted asus_token in cookie header to impersonate an admin session. | |
| action_mode | request body | /apply.cgi1 | Reboot action can be triggered via crafted POST data to apply.cgi1, enabling arbitrary command execution while an admin session exists. | |
| action_script | request body | /apply.cgi1 | Reboot action can be triggered via crafted POST data to apply.cgi1, enabling arbitrary command execution while an admin session exists. | |
| action_wait | request body | /apply.cgi1 | Reboot action can be triggered via crafted POST data to apply.cgi1, enabling arbitrary command execution while an admin session exists. |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:22Current
9.6High risk
Vulners AI Score9.6
CVSS 39.8
CVSS 210
EPSS0.21342