CVE-2021-45756

Summary: The CVE-2021-45756 issue affects ASUS RT-AC68U (versions prior to 3.0.0.4.385.20633) and RT-AC5300 (prior to 3.0.0.4.384.82072). A buffer overflow in blocking_request.cgi (an in-memory operation) can lead to arbitrary command execution. The vulnerability is confirmed by multiple sources ...

PT-2022-12388

Name of the Vulnerable Software and Affected Versions Asus RT-AC68U versions prior to 3.0.0.4.385.20633 Asus RT-AC5300 versions prior to 3.0.0.4.384.82072 Description A buffer overflow issue exists in the blocking request.cgi endpoint. Recommendations For Asus RT-AC68U versions prior to...

CVE-2021-45756: Buffer Copy without Checking Size of Input

Asus RT-AC68U 3.0.0.4.385.20633 and RT-AC5300 3.0.0.4.384.82072 are affected by a buffer overflow in blockingrequest.cgi...

ASUS RT-AC68U和ASUS RT-AC5300 安全漏洞

The ASUS RT-AC68U and ASUS RT-AC5300 are both routers from the Chinese company ASUS. A command injection vulnerability exists in the Asus RT-AC68U prior to version 3.0.0.4.385.20633 and RT-AC5300 prior to version 3.0.0.4.384.82072, which stems from a failure to properly validate data boundaries...

CVE-2022-25596

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...

Asus Rt-N53 Buffer Overflow (CVE-2019-20082)

A buffer overflow vulnerability exists in ASUS RT-N53. Successful exploitation of this vulnerability could result in a denial of service or execution of arbitrary code into the affected system...

ASUS RT-AX56U Path Traversal Vulnerability

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A path traversal vulnerability exists in ASUS RT-AX56U, which stems from the insufficient filtering of special characters in URL parameters by the login function of ASUS RT-AX56U, which could be exploited by an unauthenticated LAN attacke...

Path traversal

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

CVE-2022-22054

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

CVE-2022-22054: Improper Limitation of a Pathname to a Restricted Directory

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files...

PT-2022-15206

Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U affected versions not specified Description The issue is related to a path traversal vulnerability in the login function due to inadequate filtering for special characters in URL parameters. This allows an unauthenticated attacke...

ASUS RT-AX56U has unspecified vulnerabilities

ASUS RT-AX56U is a wireless router from ASUS Taiwan, China.A security vulnerability exists in the ASUS RT-AX56U Wi-Fi router, which stems from incorrect validation of the length of the httpd parameter. An attacker could use the vulnerability to initiate arbitrary code execution to control the...

ASUS RT-AC52U_B1 Cross-Site Scripting Vulnerability

Asus Rt-Ac52UB1 is a dual-band wireless router from Asus China.A cross-site scripting vulnerability exists in ASUS RT-AC52UB1, which stems from the presence of invalid data filtering in ASUS RT-AC52U B1 version 3.0.0.4.380.10931, which could lead to user session hijacking. No detailed vulnerabili...

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

Cross site scripting

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

CVE-2021-46109

Invalid input sanitizing leads to reflected Cross Site Scripting XSS in ASUS RT-AC52UB1 3.0.0.4.380.10931 can lead to a user session hijack...

CVE-2021-46109

The CVE-2021-46109 issue concerns the ASUS RT-AC52U_B1 router (firmware 3.0.0.4.380.10931). Affected component: input handling where invalid input sanitizing enables reflected Cross-Site Scripting (XSS). Root cause: inadequate input validation/sanitization leads to a reflected XSS condition that ...

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

Stack overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

CVE-2021-44158 ASUS RT-AX56U Router - Stack-based buffer overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...