3094 matches found
PT-2023-13590 · Asus · Asus Rt-Ax82U
Name of the Vulnerable Software and Affected Versions: Asus RT-AX82U version 3.0.0.4.386 49674-ge182230 Description: An information disclosure issue exists in the cm processREQ NC opcode of the router's configuration service. A specially-crafted network packet can lead to a disclosure of sensitiv...
Asus RT-AX82U cfg_server cm_processConnDiagPktList denial of service vulnerability
Talos Vulnerability Report TALOS-2022-1592 Asus RT-AX82U cfgserver cmprocessConnDiagPktList denial of service vulnerability January 10, 2023 CVE Number CVE-2022-38393 SUMMARY A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U...
CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service DoS or escalate privileges via crafted IOCTL requests...
CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service DoS or escalate privileges via crafted IOCTL requests...
Memory corruption
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service DoS or escalate privileges via crafted IOCTL requests...
ASUS Aura Sync 缓冲区错误漏洞
ASUS Aura Sync is a hardware light synchronization plug-in from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Sync version v1.07.79, which stems from the failure of the MsIo64.sys component to properly validate inputs, allowing an attacker to trigger memory corruption and...
CVE-2022-44898
The CVE-2022-44898 issue affects Asus Aura Sync: MsIo64.sys in v1.07.79 and earlier does not properly validate inputs to IOCTLs 0x80102040, 0x80102044, 0x80102050, and 0x80102054, enabling memory corruption that can lead to a Denial of Service or privilege escalation via crafted IOCTL requests. D...
PT-2022-27329 · Asus · Asus Aura Sync
Name of the Vulnerable Software and Affected Versions: Asus Aura Sync versions through v1.07.79 Description: The issue concerns the MsIo64.sys component, which does not properly validate input to certain IOCTL requests, specifically 0x80102040, 0x80102044, 0x80102050, and 0x80102054. This allows...
CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory corruption and cause a Denial of Service DoS or escalate privileges via crafted IOCTL requests...
CVE-2022-4221
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...
CVE-2022-4221
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...
Command injection
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...
CVE-2022-4221
CVE-2022-4221 concerns ASUS NAS-M25 prior to 1.0.1.7, where an improper neutralization of special elements in OS commands allows an unauthenticated attacker to inject commands via unsanitized cookie values. Affected component is the OS command execution path tied to cookie handling. Documented im...
CVE-2022-4221 OS command injection in ASUS M25 NAS
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...
CVE-2022-4221 OS command injection in ASUS M25 NAS
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7...
ASUS NAS-M25 操作系统命令注入漏洞
The ASUS NAS-M25 is a storage server from Asus China. A security vulnerability exists in ASUS NAS-M25 version 1.0.1.7 and prior versions, which stems from an improperly neutralized special element used OS Command Injection vulnerability that allows an unauthenticated attacker to inject arbitrary...
PT-2022-26313 · Asus · Asus Nas-M25
Name of the Vulnerable Software and Affected Versions: Asus NAS-M25 versions through 1.0.1.7 Description: The issue is related to an improper neutralization of special elements used in an OS command, allowing an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie value...
The vulnerabilities of the System Control Interface and AsusSwitch drivers, along with the AsusLiveUpdate.dll library for Windows operating systems, allow a hacker to write or delete any files from the Temp directory.
The vulnerability of the System Control Interface and AsusSwitch drivers, as well as the AsusLiveUpdate.dll library for Windows operating systems, is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker to write or delete any files from the Temp directory...
CVE-2020-23648
Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / startapply.htm, an attacker can change the administrator password without any authentication...