RT-AC68U vulnerable to cross-site scripting

Overview RT-AC68U provided by ASUS Japan Inc. is a wireless LAN router. RT-AC68U contains a cross-site scripting vulnerability CWE-79. Yuto MAEDA of University of Tsukuba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

RT-AC87U vulnerable to cross-site scripting

Overview RT-AC87U provided by ASUS Japan Inc. is a wireless LAN router. RT-AC87U contains a cross-site scripting vulnerability CWE-79. Keigo Yamazaki of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

ASUS RT-N14UHP 'flag' parameter cross-site scripting vulnerability

The ASUS RT-N14UHP is a wireless router device from ASUS. A cross-site scripting vulnerability exists in the 'flag' parameter in ASUS RT-N14UHP devices prior to version 3.0.0.4.380.8015. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-15656

Password are stored in plaintext in nvram in the HTTPd server in all current versions = 3.0.0.4.380.7743 of Asus asuswrt...

CVE-2017-15655

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version =3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time...

ASUS DSL-N14U B1 Router 1.1.2.3_345 - Change Administrator Password Exploit

Exploit for hardware platform in category web applications import requests import sys import urllib3 ip = sys.argv1 user = sys.argv2 newPassword = sys.argv3 requests.packages.urilib3.disablewarnings urllib3.disablewarningsurllib3.exceptions.InsecureRequestWarning data = "groupid": '', "actionmode...

ASUS DSL-N14U B1 Router 1.1.2.3_345 - Change Administrator Password

ASUS DSL-N14U B1 Router 1.1.2.3345 - Change Administrator Password import requests import sys import urllib3 ip = sys.argv1 user = sys.argv2 newPassword = sys.argv3 requests.packages.urilib3.disablewarnings urllib3.disablewarningsurllib3.exceptions.InsecureRequestWarning data = "groupid": '',...

Multiple ASUS Products Asuswrt-Merlin httpd Stack Buffer Overflow Vulnerability

ASUS RT-AC5300 and others are wireless routers from Asus ASUS. asus Asuswrt-Merlin is the firmware that runs in it. httpd is one of the embedded http servers. A stack buffer overflow vulnerability exists in Asuswrt-Merlin 380.670RT-AC5300 and prior versions of httpd in several ASUS products. A...

CVE-2017-12754

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.670RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200,...

CVE-2017-12754

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.670RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200,...

Asuswrt-Merlin Firmware Stack Buffer Overflow Vulnerability in Multiple ASUS Products

ASUS RT-AC5300 and others are RT series router products from Asus ASUS.Asuswrt-Merlin is the firmware that runs on it. A stack buffer overflow vulnerability exists in the ASUSDiscovery.c file of networkmap in the Asuswrt-Merlin firmware in multiple ASUS products. A remote attacker can exploit thi...

CVE-2017-5892

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-8878

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-6548: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before...

CVE-2017-5632

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

ASUS RT-N10E Code Execution Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A code execution vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to potentially execute system commands at some system commands. Code can also be executed via a cross-site request forgery...

ASUS DSL-N55U Router Cross-Site Scripting Vulnerability

ASUS DSL-N55U is a dual-band wireless router product from ASUS. Cross-site scripting vulnerabilities exist in ASUS DSL-N55U Router version 3.0.0.4.3762736 that stem from the program failing to properly filter user-submitted input. An attacker could execute arbitrary code in the context of the...

ASUS DSL-N55U Router Information Disclosure Vulnerability

ASUS DSL-N55U is a dual-band wireless router product from ASUS. Information disclosure vulnerabilities exist in ASUS DSL-N55U Router version 3.0.0.4.3762736 that stem from the program failing to properly filter user-submitted input. When a user browses an affected website, an attacker steals...

ASUS TM-AC1900 Buffer Overflow Vulnerability

The ASUS TM-AC1900 is a wireless router. The ASUS TM-AC1900 suffers from a security vulnerability in the HTTP header parsing program, which can be exploited by an attacker to execute arbitrary code in the root context because the program fails to properly check the header value...