CVE-2026-75808

ASUS Armoury Crate is affected by an allocation of resources without limits or throttling flaw. A local user with low privileges can bypass driver authentication and allocate an unrestricted amount of system memory, leading to a denial-of-service condition through memory exhaustion. The attack ve...

CVE-2026-75808

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authentication and allocating an unrestricted amount of memory.Refer to the ' Security Update for Armoury Crat...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-75809

ASUS Armoury Crate is affected by an insufficient access control vulnerability in its exposed IOCTL interface. A local user with low privileges can bypass driver authentication to read from and write to PCIe configuration space , enabling information disclosure and the disabling of device functio...

EUVD-2026-72619

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

EUVD-2026-72618

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-75810

ASUS Armoury Crate contains an exposed dangerous method or function that allows a local user to bypass driver authentication and send requests to trigger system management interrupts (SMIs) . A single trigger causes a brief system stall; repeatedly triggering SMIs can escalate to a denial-of-serv...

CVE-2026-75811

ASUS Armoury Crate is affected by an improper restriction of software interfaces to hardware features , allowing a local user with low privileges to bypass driver authentication and access critical model-specific registers . This can lead to modification of hardware configuration settings and pot...

CVE-2026-75811

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...

EUVD-2026-72616

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 RCE PoC ASUS wifi router RCE vulnerability This PoC is for learning and research purposes only. Do not use it for illegal activities; you are solely responsible for any legal consequences. This is a test conducted after code modifications based on this PoC, as the original PoC migh...

CVE-2022-35899

CVE-2022-35899 Unquoted Service Path Asus GameSdk Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Privilege Escalation Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 Step to discover the unquoted...

CVE-2018-14714-POC

CVE-2018-14714-POC 2020年4月25日，Altin Thartori，github.com/tin-z 漏洞详情 ASUS RT-AC3200 版本 3.0.0.4.382.50010 中的 appGet.cgi 存在系统命令注入漏洞，攻击者可通过 "loadscript" URL 参数执行系统命令。 CVE-2018-14714 参考： https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8 POC root@kitploit:...

CVE-2023-35086-POC

CVE-2023-35086-POC 2023年7月25日，Altin tin-z，github.com/tin-z 简要描述 ASUS RT-AX56U V2 和 RT-AC86U 路由器固件（版本分别低于或等于 3.0.0.4.38650460 和 3.0.0.438651529）在 httpd 服务的 detwan.cgi 函数中存在格式字符串漏洞，当攻击者构造恶意数据时可能导致代码执行。该漏洞也影响其他使用 httpd 服务的 ASUS 设备。点击此处查看详情。 参考： mitre 报告 cve.report Poc 该漏洞可实现 RCE，而此 PoC 仅实现...

CVE-2020-36109-POC

CVE-2020-36109-POC 2021年2月13日, Altin Thartori, github.com/tin-z 漏洞详情 ASUS RT-AX86U 路由器固件版本低于 9.0.0.4386 时，httpd 模块的 blockingrequest.cgi 函数存在缓冲区溢出，当攻击者构造恶意数据时可导致代码执行。 该漏洞不仅存在于 RT-AX86U 中，也存在于其他使用 httpd 服务的型号中。详情 参考资料： NIST 报告 cvebase 漏洞利用详情 该漏洞不允许我们实现 RCE，实际上只能实现 DoS。 首先是因为 canary，其次是因为 'strcat'...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit CVE 编号 CVE-2019-11061 : HG100 中的访问控制失效 受影响产品 : ASUS SmartHome Gateway HG100 固件版本 受影响产品 : ASUS SmartHome Android 应用版本 : optional arguments: -h, --help show this help message and exit -u, --list-user list all user in device -l, --list-device list all device status -s deviceid...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

CVE-2022-32988

CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...

SmmExploit

SmmExploit This is a report and an exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303. The issue was fixed in the version 304. Issue Description Summary UX360CA BIOS version 303 has 3 vulnerable modules that allow an attacker wit...