asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Several models of ASUS's routers include a service called infosvr that listens on UDP broadcast port 9999 on the LAN or WLAN interface. It's used by one of ASUS's tools to ease router configuration by automatically locating routers on the...

CVE-2024-3912

Why? Publishing because Mirai are a bunch of irritating twats that keep popping my honeypot with it - you're not the malware I am after. Fek off please. Here's their irritating malware distribution IP and defualt payload script. http://130.12.180.69/bins/kla.sh Description Asus router arbitrary...

CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

CVE-2026-75779

Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...

CVE-2026-93489

Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...

EUVD-2026-108609

Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...

CVE-2026-93489

An Improper Authentication vulnerability in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket . This flaw enables an attacker to perform administrator operations on the affected hardware. The documents do not provide specific software ver...

CVE-2026-93489

Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security...

EUVD-2026-108608

Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...

CVE-2026-75779

An OS Command Injection and Cross-Site Request Forgery (CSRF) vulnerability exists in an ASUS router model. An attacker can trick a logged-in administrator into visiting a phishing website, which triggers the router to execute arbitrary commands with root privileges . For further information and ...

CVE-2026-75779

Improper Neutralization of Special Elements used in an OS Command “OS Command Injection” and Cross-Site Request Forgery CSRF in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website, causing the router to execute arbitrary commands with root...

CVE-2026-17518

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section ...

CVE-2026-17518

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section ...

CVE-2026-17518

Certain ASUS router models are vulnerable to a buffer copy without checking the size of input . This flaw allows an adjacent authenticated user to send an HTTP request with input exceeding the expected length, potentially leading to corrupted device operations or a denial of service (DoS) . Remed...

EUVD-2026-104783

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length. Refer to the ' Security Update for ASUS Router Firmware' section ...

CVE-2026-14911

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

CVE-2026-16528

Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially enabling modification of DNS settings.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2026-14911

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...

EUVD-2026-94159

Improper Neutralization of Input During Web Page Generation “Cross-site Scripting” in ASUS router modules allows a remote attacker to read DOM information, modify router settings, and cause a denial-of-service condition when an authenticated user visits a crafted URL.Refer to the ' Security Updat...