CVE-2021-43702

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

CVE-2021-41435

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56UV2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 SeriesRT-AX86U/RT-AX86S, RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400...

CVE-2021-37316

SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow...

CVE-2021-40556

A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacke...

CVE-2018-17022

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...

CVE-2009-3093

Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a...

CVE-2009-3092

Buffer overflow on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable...

PT-2025-17475 · Mrcms +1 · Mrcms +1

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.3 ASUS router affected versions not specified Description: A vulnerability has been found that allows for cross-site scripting through the manipulation of the Username argument in the file /admin/user/edit.do of the Edit Use...

The vulnerability in the sysinfo.asp script of ASUS RT-N12E router microprogramming software allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the sysinfo.asp script in ASUS RT-N12E router microprogramming software is related to the lack of measures taken to protect the website structure when processing SSID identifiers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks X...

CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

CVE-2024-12912

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-12912

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

PT-2025-1262 · Asus · Asus Router Aicloud

Name of the Vulnerable Software and Affected Versions: ASUS Router AiCloud affected versions not specified Description: An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. The vulnerability is related to the lack o...

CVE-2024-13062: Hidden Functionality

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

The vulnerability of ASUS RT-AX55, RT-AX55 V2, RT-AX56U, RT-AX56U V2, RT-AX57, RT-AX58U, and RT-AX58U V2 router microprogramming software lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of ASUS RT-AX55, RT-AX55 V2, RT-AX56U, RT-AX56U V2, RT-AX57, RT-AX58U, and RT-AX58U V2 microprogrammed router software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2024-11985

The CVE-2024-11985 issue is an improper input validation vulnerability affecting ASUS router models RT-AX55, RT-AX55 V2, RT-AX56U, RT-AX56U V2, RT-AX57, RT-AX58U, and RT-AX58U V2. Public sources (PT-2024-9469 and CNNVD-202412-295) describe the root cause as insufficient/incorrect input validation...

CVE-2024-11985

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information...

CVE-2024-11985: Improper Input Validation

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information...

ASUS RT-AX55 安全漏洞

The ASUS RT-AX55 is a dual-band Wi-Fi router from Asus China. ASUS RT-AX55 A security vulnerability exists in versions prior to 3.0.0.4.38652332, which stems from incorrect input validation and causes the device to crash...