648 matches found
PT-2021-11914 · Asus · Asus Rt-Ax86
Name of the Vulnerable Software and Affected Versions: ASUS RT-AX86U router firmware versions prior to 9.0.0.4 386 Description: The issue is related to a buffer overflow in the blocking request.cgi function of the httpd module. This can cause code execution when an attacker constructs malicious...
ASUS RT-AX86U suffers from a buffer overflow vulnerability
The RT-AX86U is a WiFi6 gaming router. The ASUS RT-AX86U suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a memory corruption that could lead to code execution...
PT-2021-7659
Name of the Vulnerable Software and Affected Versions ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634 Description The issue is related to an Incorrect Access Control problem in the Cloud Disk feature of the ASUS RT-AC68U router firmware. This problem allows remote attackers to...
ASUS RT-AC88U Information Disclosure Vulnerability
The ASUS RT-AC88U is a wireless router from Asus China. An information disclosure vulnerability exists in RT-AC88U Download Master versions prior to 3.1.0.108, which stems from allowing direct access to the downloadmaster dm app .cgi...
VulnCheck KEV: CVE-2013-5948
The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...
CVE-2020-15499
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page...
CVE-2020-15498
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...
CVE-2020-15498
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...
CVE-2020-15498: Improper Certificate Validation
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...
CVE-2020-15499: Improper Neutralization of Input During Web Page Generation
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page...
PT-2020-14461
Name of the Vulnerable Software and Affected Versions ASUS RT-AC1900P versions prior to 3.0.0.4.385 20253 Description An issue was discovered that allows XSS via spoofed Release Notes on the Firmware Upgrade page. Recommendations For versions prior to 3.0.0.4.385 20253, update to version...
PT-2020-14460
Name of the Vulnerable Software and Affected Versions ASUS RT-AC1900P versions prior to 3.0.0.4.385 20253 Description An issue was discovered where the router accepts an arbitrary server certificate for a firmware update. This is due to the --no-check-certificate option being passed to the wget...
Asus Rt Ac3200 Firmware Command Injection (CVE-2018-14714)
A command injection vulnerability exists in Asus Rt Ac3200 Firmware. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2013-3093
ASUS RT-N56U devices allow CSRF...
CVE-2013-3093
ASUS RT-N56U devices allow CSRF...
PT-2020-7427
Name of the Vulnerable Software and Affected Versions: ASUS RT-N56U devices affected versions not specified Description: The issue allows for CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...
CVE-2013-4656
The CVE-2013-4656 entry describes a symlink traversal vulnerability in the SMB service caused by misconfiguration on affected devices. The affected products are ASUS RT-AC66U and RT-N56U ; the underlying issue is misconfigured SMB leading to a path traversal vulnerability. Reported impact is seve...
CVE-2013-4656: Improper Limitation of a Pathname to a Restricted Directory
Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service...
PT-2019-6959
Name of the Vulnerable Software and Affected Versions ASUS RT-AC66U affected versions not specified ASUS RT-N56U affected versions not specified Description The issue is related to a Symlink Traversal vulnerability due to misconfiguration in the SMB service. Recommendations For ASUS RT-AC66U, at...