| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | The vulnerability of the “networkmap” component in ASUS’s microprogramming router software allows a hacker to execute arbitrary code. | 14 Dec 201700:00 | – | bdu_fstec |
 | CVE-2017-6548 | 26 Jul 202607:02 | – | circl |
 | CVE-2017-6548 | 9 Mar 201709:26 | – | cvelist |
 | ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution | 8 Mar 201700:00 | – | exploitdb |
 | ASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution | 8 Mar 201700:00 | – | exploitpack |
 | CVE-2017-6548 | 9 Mar 201709:59 | – | nvd |
 | CVE-2017-6548 | 9 Mar 201709:59 | – | osv |
 | Buffer overflow | 9 Mar 201709:59 | – | prion |
 | PT-2017-3174 | 8 Mar 201700:00 | – | ptsecurity |
 | CVE-2017-6548: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9 Mar 201700:00 | – | rapid7 |
10
Node
AND
| Source | Link |
|---|---|
| asuswrt | www.asuswrt.lostrealm.ca/changelog |
| exploit-db | www.exploit-db.com/exploits/41573/ |
| securityfocus | www.securityfocus.com/bid/96938 |
| bierbaumer | www.bierbaumer.net/security/asuswrt/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| file | path | /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA';alert('XSS');'A | HTTPD handle_request overlong filename redirect allows injection of arbitrary JavaScript in the router web interface (XSS). | CWE-119 |
| asus_token | header | /syslog.txt | Cookie-based session authentication bypass: setting asus_token=cgi_logout with a specific User-Agent header may be treated as signed-in when another admin session is active. | CWE-119 |
| User-Agent | header | /syslog.txt | Cookie-based session authentication bypass: setting asus_token=cgi_logout with a specific User-Agent header may be treated as signed-in when another admin session is active. | CWE-119 |
| asus_token | header | /apply.cgi1 | Cookie-based session authentication bypass via POST to apply.cgi1 with action parameters; reboot can be triggered if an admin session is active. | CWE-119 |
| User-Agent | header | /apply.cgi1 | Cookie-based session authentication bypass via POST to apply.cgi1 with action parameters; reboot can be triggered if an admin session is active. | CWE-119 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:22Current
9.6Critical risk
Vulners AI Score9.6
CVSS 39.8
CVSS 210
EPSS0.21342