CVE-2018-18287

On ASUS RT-AC58U 3.0.0.4.3806516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the MainLogin.asp page...

CVE-2018-18291

A cross site scripting XSS vulnerability on ASUS RT-AC58U 3.0.0.4.3806516 devices allows remote attackers to inject arbitrary web script or HTML via AdvancedASUSDDNSContent.asp, AdvancedWSecurityContent.asp, AdvancedWirelessContent.asp, Logout.asp, MainLogin.asp, MobileQISLogin.asp, QISwizard.htm...

CVE-2018-18287

Affected product : ASUS RT-AC58U router (firmware 3.0.0.4.380_6516). Vulnerability : Information disclosure via reading dhcpLeaseInfo data in the HTML source of Main_Login.asp, allowing remote attackers to discover hostnames and IP addresses. Root cause : The HTML page exposes DHCP lease informat...

CVE-2018-17127

blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...

CVE-2018-17127

blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...

Null pointer dereference

blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...

CVE-2018-17127

blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...

CVE-2018-17127

The vulnerability CVE-2018-17127 affects ASUS GT-AC5300 routers (blocking_request.cgi) up to version 3.0.0.4.384_32738. The root cause is a NULL pointer dereference triggered by a request missing the timestap parameter, leading to remote denial of service and device reboot/crash. Affected version...

ASUS GT-AC5300 Denial of Service Vulnerability (CNVD-2018-19561)

The ASUS GT-AC5300 is a wireless router from ASUS. A security vulnerability exists in the blockingrequest.cgi file in the ASUS GT-AC5300 3.0.0.4.38432738 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and device crash...

ASUS GT-AC5300 Buffer Overflow Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A buffer overflow vulnerability exists in ASUS GT-AC5300 3.0.0.4.38432738 and prior versions. An attacker can exploit this vulnerability to cause a denial of service device crash by setting a long shpath0 value and sending a request to...

ASUS GT-AC5300 Denial of Service Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A security vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. An attacker can exploit the vulnerability by sending 'GET / HTTP/1.1\r\n' to cause a denial of service...

ASUS GT-AC5300 Cross-Site Request Forgery Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site request forgery vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a request to the startapply.htm page to change the administrat...

ASUS GT-AC5300 Cross-Site Scripting Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site scripting vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a 'hook' parameter to the appGet.cgi file to inject arbitrary web...

Cross site scripting

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

CVE-2018-17022

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...

CVE-2018-17023

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

CVE-2018-17020

ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...

Stack overflow

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...