CVE-2017-5892

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

CVE-2017-8878

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-5632

An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the device's WAN connection, causing disconnection from the Internet, a Denial of Service DoS. The attack...

ASUS RT-N10E Code Execution Vulnerability

ASUS RT-N10E Wireless Router is a wireless router device developed by ASUS. A code execution vulnerability exists in ASUS RT-N10E. An attacker can exploit the vulnerability to potentially execute system commands at some system commands. Code can also be executed via a cross-site request forgery...

ASUS DSL-N55U Router Information Disclosure Vulnerability

ASUS DSL-N55U is a dual-band wireless router product from ASUS. Information disclosure vulnerabilities exist in ASUS DSL-N55U Router version 3.0.0.4.3762736 that stem from the program failing to properly filter user-submitted input. When a user browses an affected website, an attacker steals...

ASUS DSL-N55U Router Cross-Site Scripting Vulnerability

ASUS DSL-N55U is a dual-band wireless router product from ASUS. Cross-site scripting vulnerabilities exist in ASUS DSL-N55U Router version 3.0.0.4.3762736 that stem from the program failing to properly filter user-submitted input. An attacker could execute arbitrary code in the context of the...

ASUS TM-AC1900 Buffer Overflow Vulnerability

The ASUS TM-AC1900 is a wireless router. The ASUS TM-AC1900 suffers from a security vulnerability in the HTTP header parsing program, which can be exploited by an attacker to execute arbitrary code in the root context because the program fails to properly check the header value...

CVE-2015-6949

Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote attackers to execute arbitrary code via crafted HTTP header values...

ASUS Router Multiple Vulnerabilities (Aug 2015) - Active Check

ASUS Router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Asus Wireless-N Gigabit Router Information Disclosure

Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

ASUS RT-G32 Cross-Site Request Forgery Vulnerability

ASUS RT-G32 routers is a router device. A cross-site request forgery vulnerability exists in ASUS RT-G32 routers, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

CVE-2015-1437 XSS In ASUS Router.

Title:- Reflected XSS vulnarbility in Asus RT-N10 Plus router Author: Kaustubh G. Padwad Product: ASUS Router RT-N10 Plus Firmware: 2.1.1.1.70 Severity: HIGH Auth: Not requierd CVE ID: CVE-2015-1437 Description: Vulnerable Parameter: flag= Vulnerability Class: Cross Site Scripting...

CVE-2015-1437

Multiple cross-site scripting XSS vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote attackers to inject arbitrary web script or HTML via the flag parameter to 1 resultofgetchangedstatus.asp or 2 errorpage.htm...

Asus RT-N10 Plus Router 'flag' parameter cross-site scripting vulnerability

The Asus RT-N10 Plus Router is a router device. A cross-site scripting vulnerability exists in the handling of the 'flag' parameter in the Asus RT-N10 Plus Router, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be used to...

ASUS Router 'infosvr' Remote Command Execution

The remote device is an ASUS router that contains firmware which is affected by a flaw in its 'infosvr' service due to not properly checking the MAC address of a request. An unauthenticated, remote attacker, using a crafted request to UDP port 9999, can exploit this to run arbitrary commands or...

ASUS Router infosvr Service Remote Command Execution Vulnerability

Added: 01/13/2015 CVE: CVE-2014-9583 BID: 71889 OSVDB: 116691 Background ASUS manufactures network devices, including routers and wireless repeaters. Some of these devices include the infosvr service, part of the "ASUS Wireless Router Device Discovery Utility". The infosvr service listens on port...

ASUS router aeration Root privileges command execution vulnerability-vulnerability warning-the black bar safety net

! 2 copya foreign security researchers the 6th of this month in the online disclosure, the ASUS router firmware there is a serious vulnerability that allows the execution of unauthorized commands, and may exist in all current versions of ASUS router firmware. Currently, there is already an exploi...

The ASUS router command execution vulnerability CVE-2 0 1 4-9 5 8 3-vulnerability warning-the black bar safety net

! t0140aff45889426081. png ASUS router firmware there is a serious security vulnerability that allows unauthenticated command execution. CVE CVE-2 0 1 4-9 5 8 3 in. Affected version Currently, all known router firmware version RT-AC66U, RT-N66U, etc. are affected. Is measured in...

Asus Wireless-N Gigabit Router Information Disclosure

Remote administrator password Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

PT-2014-3002

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC68U and other RT series routers versions prior to 3.0.0.4.374.5047 Description: The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the destIP parameter in the Target field of the...