Lucene search

K

Rt-n10+d1 Security Vulnerabilities

cve
cve

CVE-2018-20334

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get...

9.8CVSS

9.6AI Score

0.013EPSS

2020-03-20 01:15 AM
83
cve
cve

CVE-2018-20333

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the...

7.5CVSS

7.5AI Score

0.003EPSS

2020-03-20 01:15 AM
58
cve
cve

CVE-2018-20335

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?=...

7.5CVSS

7.5AI Score

0.001EPSS

2020-03-20 01:15 AM
60
cve
cve

CVE-2015-1437

Multiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote attackers to inject arbitrary web script or HTML via the flag parameter to (1) result_of_get_changed_status.asp or (2)...

5.8AI Score

0.002EPSS

2015-02-04 04:59 PM
27