PT-2020-8668

Name of the Vulnerable Software and Affected Versions: ASUSWRT version 3.0.0.4.384.20308 Description: An issue was discovered in the processing of the "/start apply.htm" POST data, where a command injection issue exists via shell metacharacters in the fb email parameter. This allows an attacker t...

PT-2018-13844

Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 routers with firmware through 3.0.0.4.384 32738 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a...

PT-2015-5828

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that change the administrator password via a request to "start...

PT-2015-5833

Name of the Vulnerable Software and Affected Versions ASUS RT-G32 routers versions 2.0.2.6 through 2.0.3.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. The parameters next page, group id, action script, or flag in the "start...