asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Several models of ASUS's routers include a service called infosvr that listens on UDP broadcast port 9999 on the LAN or WLAN interface. It's used by one of ASUS's tools to ease router configuration by automatically locating routers on the...

CVE-2024-3912

Why? Publishing because Mirai are a bunch of irritating twats that keep popping my honeypot with it - you're not the malware I am after. Fek off please. Here's their irritating malware distribution IP and defualt payload script. http://130.12.180.69/bins/kla.sh Description Asus router arbitrary...

CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

CVE-2026-93489

ASUS router Auth Bypass / RCE affecting an estimated 94 different models anything WiFi 6 and onwards. Estimated 25-35 million devices affected by this vulnerability...

CVE-2026-88707

An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...

CVE-2026-88708

An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Securit...

CVE-2026-88709

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing arbitrary commands with root privileges. Refer to the ' Security Update...

CVE-2026-88710

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command injection—resulting in the execution of arbitrary...

CVE-2026-88708

An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Securit...

EUVD-2026-120743

An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Securit...

CVE-2026-88708

An off-by-one error exists in certain ASUS Router firmware components. This vulnerability allows an unauthenticated nearby user to send a packet with a specific header length, which may result in memory being overwritten and causing the affected service to crash . For remediation, users are direc...

EUVD-2026-120742

An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...

CVE-2026-88707

Certain ASUS Router firmware versions are vulnerable to an out-of-bounds write (CWE-787). This flaw allows an unauthenticated nearby user to send a specially crafted HTTP request with parameters exceeding the buffer length. Successful exploitation could lead to overwriting other memory regions or...

CVE-2026-88707

An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...

CVE-2026-88710

Certain ASUS Router firmware versions are vulnerable to a vulnerability involving the improper neutralization of special elements used in an OS command (CWE-78). This flaw allows an unauthenticated nearby user to execute a chain of actions, including unauthenticated queries, identifier guessing, ...

CVE-2026-88710

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command injection—resulting in the execution of arbitrary...

EUVD-2026-120741

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command injection—resulting in the execution of arbitrary...

CVE-2026-88709

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing arbitrary commands with root privileges. Refer to the ' Security Update...

CVE-2026-88709

Certain ASUS Router firmware versions are vulnerable to an OS command injection flaw due to improper neutralization of special elements. An attacker with physical access can insert a USB device containing a specially crafted directory name to potentially execute arbitrary commands with root privi...

EUVD-2026-120740

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with physical access to insert a USB device containing a specially crafted directory name, potentially executing arbitrary commands with root privileges. Refer to the ' Security Update...