CVE-2024-27673

CVE-2024-27673 ASUS Control Center Express = 01.06.15 - Unquoted Service Path Description: ASUS Control Center Express Version = 01.06.15 contains an unquoted service path which allows attackers to escalate privileges to the system level. Assuming attackers have write access to C:, the attackers...

cve-2016-5345

CVE-2016-5345 高通FM无线电驱动程序中的权限提升。已在ASUS设备上测试利用。打开易受攻击的设备驱动程序需要一些已有权限。 原始CVE由Shellphish Grill团队的Aravind Machiry（donfos）发现。...

CVE-2026-12960

CVE-2026-12960 华硕路由器应用中的 Android 应用组件导出不当 华硕路由器 Android 应用（com.asus.aihome）中捆绑的一个组件被声明为 android:exported="true"，且未设置 android:permission。同一设备上的任何其他应用，即使不持有任何权限，也可以向其发送精心构造的 Intent，并让华硕路由器应用以用户名义打开攻击者控制的 URI。 于 2026-03-17 向华硕报告。华硕已修复，并作为 CVE-2026-12960 于 2026-07-03 发布。 由 Show Up Show Out Security 的...

CVE-2024-1655

CVE-2024-1655 Description ASUS ExpertWiFi EBM63, EBM68, and RT-AX57 Go firmwares before the 12-04-2024 patch contain a command injection vulnerability in splashpageSDN.cgi function. When an attacker sends a specially crafted request, they can achieve arbitrary code execution. references: Official...

SUSE CVE-2026-80774

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

asus-cmd

ASUS 路由器 infosvr UDP 广播 root 命令执行 ASUS 的多款路由器包含一个名为 infosvr 的服务，该服务监听 LAN 或 WLAN 接口上的 UDP 广播端口 9999。ASUS 的某个工具使用该服务来自动定位本地子网中的路由器，以简化路由器配置。此服务以 root 权限运行，并包含一个无需身份验证的命令执行漏洞。该服务的源代码以及路由器其余部分的代码均可从 ASUS 支持网站 获取。 CVE 分配给此问题的 CVE 编号为 CVE-2014-9583（唉，终究不是 CVE-2014-10000 :-/）。 受影响版本...

CVE-2026-80774

CVE-2026-80774 affects the Linux kernel in the HID asus driver. The root cause is that to_usb_interface() is called without first verifying the device is genuinely USB via hid_is_usb(). Because the uhid subsystem can create devices that report BUS_USB but lack an actual USB parent, this unchecked...

EUVD-2026-71417

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80774 HID: asus: fix missing hid_is_usb() check

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-80774

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

CVE-2026-75754

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

EUVD-2026-70865

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

CVE-2026-75754

ASUS Control Center is affected by a combination of Missing Authentication for Critical Function , Server-Side Request Forgery (SSRF) , and Use of Hard-coded Credentials . An unauthorized network-based attacker with no prior privileges can obtain the encryption key via an HTTP request , causing a...

CVE-2026-75754

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

PT-2026-85382

Name of the Vulnerable Software and Affected Versions ASUS Control Center Enterprise versions 0 through 4.0.0.2 Description An issue involving missing authentication for critical functions, Server-Side Request Forgery SSRF, and the use of hard-coded credentials allows an unauthenticated network...

Linux Distros Unpatched Vulnerability : CVE-2026-80774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: asus: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being ...

CVE-2026-1880

CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub 更新 TOCTOU 本地权限提升 ASUS DriverHub 驱动更新进程 TOCTOU 漏洞，可导致本地权限提升 技术资源 技术演示文稿 PDF 한국어.md | English.md 华硕名人堂 后记 尽管技术影响可能并不显著，但我很高兴这是我在安全领域做出的第一个小小贡献。 致谢 我衷心感谢 @veath 在整个工作中给予的深思熟虑的建议和持续的支持。...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87U TFTP is vulnerable to Denial of ServiceDoS attack 1. NAME OF AFFECTED PRODUCTS AND VERSIONS ASUS RT-AC87U 3.0.0.4.38251640 2. PROBLEM TYPE Its primarily related to CWE-20, TFTP service running in ASUS...

CVE-2024-3912

为什么？ 发布这篇文章是因为 Mirai 是一群烦人的蠢货，一直用这个来打我的蜜罐——你们才不是我要找的恶意软件。请滚开。这是他们烦人的恶意软件分发 IP 和默认 payload 脚本。 http://130.12.180.69/bins/kla.sh 描述 Mirai 一直向我蜜罐发送的 Asus 路由器任意文件写入和命令执行 payload。公开披露时间到了，因为我懒得处理这个，并且不分享出来用于安全意识和研究。...

ASUS GT-AC2900 - Authentication Bypass

ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator application. This relates to handlerequest in router/httpd/httpd.c and authcheck in webhook.o. An...