Buffer overflow

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374979 allow remote attackers to execute arbitrary code via the 1 appsname or 2 appsflag parameter to APPInstallation.asp...

CVE-2013-6343

CVE-2013-6343 affects ASUS RT-N56U (and RT-AC66U) running firmware 3.0.0.4.374_979. The vulnerability is in the web server’s APP_Installation.asp handling of the apps_name and apps_flag parameters, leading to multiple buffer overflows in web.c of httpd. This allows remote attackers to execute arb...

PT-2014-3097

Name of the Vulnerable Software and Affected Versions ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374 979 Description The issue is related to multiple buffer overflows in the httpd web.c component. Remote attackers can execute arbitrary code by manipulating the apps name or apps flag...

CVE-2013-6343: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374979 allow remote attackers to execute arbitrary code via the 1 appsname or 2 appsflag parameter to APPInstallation.asp...

ASUS RT-N56U缓冲区溢出漏洞

No description provided by source...

ASUS RT-N56U - Remote Root Shell Buffer Overflow (ROP)

ASUS RT-N56U remote root shell buffer overflow exploit. !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jaco...

ASUS RT-N56U - Remote Buffer Overflow (ROP)

ASUS RT-N56U - Remote Buffer Overflow ROP !/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimp...

ASUS RT-N56U Remote Root

!/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy - Security Analyst @ ISE Contact: Twitt...

ASUS RT-N56U - Remote Buffer Overflow (ROP)

!/usr/bin/env python from time import sleep from sys import exit import urllib2, signal, struct, base64, socket, ssl Title: ASUS RT-N56U Remote Root Shell Exploit - appsname Discovered and Reported: October 2013 Discovered/Exploited By: Jacob Holcomb/Gimppy - Security Analyst @ ISE Contact: Twitt...

CVE-2013-7293

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traff...

Design/Logic Flaw

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traff...

CVE-2013-7293

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traff...

CVE-2013-7293

The CVE-2013-7293 entry describes a vulnerability in the ASUS WL-330NUL router where the configuration process relies on accessing 192.168.1.1 while the documentation instructs using a DNS hostname that may not resolve to 192.168.1.1. This mismatch can let remote attackers hijack configuration tr...

CVE-2013-7293: Improper Access Control

The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always resolve to 192.168.1.1, which makes it easier for remote attackers to hijack the configuration traff...

PT-2014-3337

Name of the Vulnerable Software and Affected Versions ASUS WL-330NUL router affected versions not specified Description The issue concerns the configuration process of the router, which relies on accessing the 192.168.1.1 IP address. However, the documentation advises users to access a DNS hostna...

ASUS Wireless router leaves USB Storage Devices vulnerable to remote attackers

In this era of Computers and Smartphones, where we are connected to the Internet every second and use it almost for everything. For an Internet connection, one has to plug a device called Router between the ISP Internet Service Provider and device. Some Routers are available with USB option, wher...

ASUS Wireless Router products contain a static DNS entry

Overview The ASUS WL-330NUL Pocket Wifi router and possibly other products contain a static DNS entry to the device's configuration pages. Description The ASUS WL-330NUL Pocket Wifi router and possibly other products contain static DNS entries to the device's configuration pages. The documentatio...

ASUS RT-N13U Router Built-in Admin Telnet Account with Unchangeable Password

The remote host is running a telnet service with an unchangeable admin account with known credentials admin/admin. An attacker could log into this account and gain complete control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

ASUS RT-N13U Backdoor Account

The ASUS RT-N13U home router comes configured with an unsecured telnet for user "admin". Telnetting in with this user will result in a root shell. The telnet is not configurable from the web interface, nor does changing the password on the web interface's admin user make any difference. I have...

ASUS RT-N10E Wireless Router < 2.0.0.25 Information Disclosure Vulnerability - Active Check

ASUS RT-N10E Wireless Router is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...