349 matches found
CVE-2020-36109
ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data...
ASUS RT-AX86U 安全漏洞
ASUS RT-AX86U is a wireless router from ASUS China. ASUS RT-AX86U router firmware is vulnerable to a buffer overflow in the blocking request.cgi function of the httpd module, which could be exploited by an attacker to construct malicious data leading to code execution...
ASUS DSL-N14U-B1 代码问题漏洞
ASUS DSL-N14U-B1 is a router device from ASUS China. ASUS DSL-N14U-B1 1.1.2.3805 devices is vulnerable and can be exploited by attackers to upload arbitrary file content as a firmware update...
PT-2021-7656 · Asus · Asus Rt-Ac68U
Name of the Vulnerable Software and Affected Versions: ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634 Description: The issue is related to a SQL injection vulnerability in the Cloud Disk feature of the ASUS RT-AC68U router firmware. This vulnerability allows remote attackers to...
ASUS RT-AC88U Injection Vulnerability
The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...
CVE-2020-29655
An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to...
ASUS RT-AC88U 注入漏洞
The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...
Weak Password Vulnerability in Asus Computer Incorporated RT-N10E B1
Offering easy CD-ROM-free installation and stable data transfer rates, the RT-N10E B1 is a basic solution for wireless network setup. A weak password vulnerability exists in the Asus Computer Incorporated RT-N10E B1. The vulnerability can be exploited by an attacker to log into the router's backe...
Binary Vulnerability in ASUS RT-AC5300, RT-AC1200
ASUS was established in June 2000, business scope: research and development, manufacturing of notebook computers, computer motherboards, medium-sized mainframe computers, high-end personal computers, servers and so on. A binary vulnerability exists in ASUS RT-AC5300, RT-AC1200, which can be...
Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.
ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...
ASUS RT-AC1900P routers firmware validation vulnerability
ASUS RT-AC1900P routers is a router device. A security vulnerability in the ASUS RT-AC1900P routers firmware upgrade processing certificate allows remote attackers to exploit the vulnerability by submitting a special request that can upgrade malicious firmware and take control of the server...
ASUS RT-AC1900P routers cross-site scripting vulnerability
ASUS RT-AC1900P routers is a router device. A cross-site scripting vulnerability exists in the ASUS RT-AC1900P routers firmware update page, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or hijack user...
CVE-2020-15498
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...
CVE-2018-20335
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APPInstallation.asp?= URI...
ASUSWRT Command Injection Vulnerability
ASUSWRT is a firmware from Asus Taiwan, China that runs in its routers. A command injection vulnerability exists in ASUS ASUSWRT version 3.0.0.4.384.20308. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during the...
ASUS WRT-AC66U Cross-Site Scripting Vulnerability (CNVD-2020-04914)
The ASUS WRT-AC66U is a product of Asus Taiwan, China. A cross-site scripting vulnerability exists in the ASUS WRT-AC66U. The vulnerability stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...
CVE-2018-8879
Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request. Vulnerable parameters ar...
ASUS RT-N10+ 2.0.3.4 CSRF / XSS / Command Execution
Exploit Title: XSS And CSRF to RCE in ASUS RT-N10 Repeater Mode Date: 13/10/2019 Exploit Author: Matheus Vrech Vendor Homepage: https://www.asus.com/ Version: ASUS RT-N10+, Firmware: 2.0.3.4 Tested on: Archlinux, Windows 10 XSS: when someone change router to repeater mode you should be able to...