3132 matches found
The ASUS router command execution vulnerability CVE-2 0 1 4-9 5 8 3-vulnerability warning-the black bar safety net
! t0140aff45889426081. png ASUS router firmware there is a serious security vulnerability that allows unauthenticated command execution. CVE CVE-2 0 1 4-9 5 8 3 in. Affected version Currently, all known router firmware version RT-AC66U, RT-N66U, etc. are affected. Is measured in...
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
Authentication flaw
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
CVE-2014-9583
CVE-2014-9583 affects ASUSWRT infosvr: a MAC-address validation flaw in common.c allows an unauthenticated remote attacker to bypass authentication and execute arbitrary commands as root via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. Public details demonstrate impact as remote command executi...
Root Command Execution Flaw Haunts ASUS Routers
There is a serious security vulnerability in the firmware of many ASUS routers that allows unauthenticated command execution. The bug may be present in all current versions of the router firmware, and there is an exploit published for it, as well. Security researchers Joshua Drake posted an...
ASUS-RT-AC66U-acsd-Param
TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @ Independent Security Evaluators Software Vendorhttp://asus.com Exploit/Advisoryhttp://securityevaluators.com,...
ASUS infosvr Auth Bypass Command Execution
This module exploits an authentication bypass vulnerability in the infosvr service running on UDP port 9999 on various ASUS routers to execute arbitrary commands as root. This module launches the BusyBox Telnet daemon on the port specified in the TelnetPort option to gain an interactive remote...
CVE-2014-2718
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware 1 update information or 2 downloaded updates, which allows man-in-the-middle MITM attackers to...
Code injection
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware 1 update information or 2 downloaded updates, which allows man-in-the-middle MITM attackers to...
CVE-2014-2718
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware 1 update information or 2 downloaded updates, which allows man-in-the-middle MITM attackers to...
CVE-2014-2718
The CVE-2014-2718 entry concerns ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U and possibly other RT-series routers. Affected firmware version is before 3.0.0.4.376.x. The issue is that the devices do not verify the integrity of firmware update informat...
The ASUS RT-series of wireless routers vulnerable, may suffer from the middleman attack-a vulnerability warning-the black bar safety net
! USA security researchers found that the ASUS RT wireless router to download and Update service is via unencrypted HTTP Protocol, and thus may be subject to MiTM attacks. Security researchers Longenecker in his blog pointed out, the ASUS RT series routers only according to a relatively simple...
Asus Wireless-N Gigabit Router Information Disclosure
Remote administrator password Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
MIPS Little Endian Shellcode
No description provided by source. Disassembled MIPS Little Endian Shellcode Shellcode was designed for ACSD exploit on the ASUS RT-AC66U SOHO router. CVE: CVE-2013-4659 Written by Jacob Holcomb, Security Analyst @ Independent Security Evaluators Blog: http://infosec42.blogspot.com Company Websit...
Asus RT56U 3.0.0.4.360 - Remote Command Injection
No description provided by source...
Asus VideoSecurity Online 3.5 Web Server Authentication Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15279/info Asus VideoSecurity Online is prone to a buffer overflow in the authentication mechanism of the included Web server. This issue only exists if authentication is enabled on the Web server. The Web server included...
ASUS RT-N56U - Remote Root Shell Buffer Overflow (ROP)
No description provided by source. !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy -...
Asus AAM6330BI/AAM6000EV ADSL Router Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8183/info It has been reported that remote users may be able to obtain sensitive information from Asus ADSL routers. It is possible to request files from the built-in Web server that contain information such as usernames,...