ASUS RT-AX56U Buffer Overflow Vulnerability

ASUS RT-AX56U is a wireless router from ASUS, China.ASUS RT-AX56U Router firmware version 3.0.0.4.386.44266 has a buffer overflow vulnerability, which stems from the strcat function's lack of length checks for user input data, which can be exploited by attackers to remotely execute commands...

CVE-2021-40556

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...

Stack overflow

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...

ASUS RT-AX56U 缓冲区错误漏洞

ASUS RT-AX56U is a wireless router from ASUS, China.ASUS RT-AX56U Router firmware version 3.0.0.4.386.44266 has a buffer overflow vulnerability, which stems from the strcat function's lack of length checks for user input data, which can be exploited by attackers to remotely execute commands...

PT-2022-11252

Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U Router version 3.0.0.4.386.44266 Description A stack overflow issue exists in the httpd service, caused by the strcat function called by the caupload input handle function, allowing users to enter a large amount of data into the...

CVE-2021-40556

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...

CVE-2021-40556: Out-of-bounds Write

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...

CVE-2021-41437

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

Heap overflow

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

CVE-2021-41437

The CVE-2021-41437 issue affects ASUS RT-AX88U firmware prior to version 3.0.0.4.388.20558. It is an HTTP response splitting vulnerability in the web application that allows an attacker to craft a URL which, if an authenticated victim visits, can grant the attacker access to the victim’s cloud st...

CVE-2021-41437

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

CVE-2021-41437

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

PT-2022-11403 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U versions prior to 3.0.0.4.388.20558 Description: The issue allows an attacker to perform an HTTP response splitting attack, enabling them to craft a specific URL. If an authenticated victim visits this URL, it grants the attacke...

CVE-2021-41437: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker...

ASUS RT-AC56U Configuration Function Code Execution

The vulnerability of the configuration function of ASUS’ Wi-Fi router software, the RT-AC56U, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2022-6315 · Asus · Asus Rt-Ax82U

Name of the Vulnerable Software and Affected Versions: Asus RT-AX82U version 3.0.0.4.386 49674-ge182230 Description: An authentication bypass issue exists in the get IFTTTTtoken.cgi functionality, allowing a specially-crafted HTTP request to lead to full administrative access to the device. An...

ASUS RT-A88U Cross-Site Scripting Vulnerability

The ASUS RT-A88U is a wireless router from ASUS of Taiwan, China. A cross-site scripting vulnerability exists in ASUS RT-A88U version 3.0.0.4.38645898, which stems from the router's administration panel failing to properly clean WiFi logs. An attacker can exploit the vulnerability to be able to...

PT-2022-11888

Name of the Vulnerable Software and Affected Versions ASUS RT-A88U version 3.0.0.4.386 45898 Description The ASUS router admin panel does not sanitize the WiFi logs correctly. If an attacker is able to change the SSID of the router with a custom payload, they could achieve stored Cross Site...

CVE-2021-43702: Improper Neutralization of Input During Web Page Generation

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

PT-2022-20965

Name of the Vulnerable Software and Affected Versions ASUS RT-N53 version 3.0.0.4.376.3754 Description The issue is related to a command injection vulnerability. This vulnerability is located in the SystemCmd parameter of the "apply.cgi" interface. Recommendations For ASUS RT-N53 version...