Denial of service

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...

Design/Logic Flaw

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

CVE-2019-15912

The CVE-2019-15912 entry concerns ASUS SmartHome Gateway family devices (HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101) using ZigBee PRO. The connected records describe vulnerability through the ZigBee trust center rejoin procedure enabling multiple denial-of-service attacks. The exact roo...

CVE-2019-15912

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks...

CVE-2019-15911

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and...

CVE-2019-15911

CVE-2019-15911 affects ASUS SmartHome Gateway HG100/WS-101/TS-101 (and related ZigBee PRO devices). The root cause is insecure key transport in ZigBee communication, enabling attackers to obtain sensitive information, cause denial of service, take over smart home devices, and tamper with messages...

CVE-2019-15910

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...

CVE-2019-15910

The CVE-2019-15910 issue affects ASUS SmartHome Gateway HG100, WS-101, TS-101 and related devices (HG100, WS-101, TS-101, and others using ZigBee PRO). The root cause is a ZigBee PRO vulnerability enabling a denial-of-service via the “discover ZigBee network procedure.” Public reports (CNVD/CNVD-...

Unspecified Vulnerability in ASUS ATK Package

ASUS ATK Package is a software package from Asus Taiwan, China for installing drivers and software in ASUS computers. A security vulnerability exists in the AsLdrSrv.exe file in versions prior to ASUS ATK Package V1.0.0061 for Windows 10 notebook PCs. An attacker can exploit the vulnerability to...

System hijacking flaws found in pre-installed Acer & ASUS software

By Sudais Firstly, Acer’s Quick Access program was found to be vulnerable to DLL hijacking through which attackers could... This is a post from HackRead.com Read the original post: System hijacking flaws found in pre-installed Acer & ASUS software...

CVE-2019-19235

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...

CVE-2019-19235

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...

Code injection

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...

CVE-2019-19235

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 for Windows 10 notebook PCs could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name...

CVE-2019-19235

The CVE-2019-19235 entry concerns ASU S ATK Package (AsLdrSrv.exe) on Windows 10 notebook PCs, pre‑version 1.0.0061. The vulnerability enables unsigned code execution with no additional execution required, contingent on the user placing an application at a specific path with a specific file name....

ASUS ZenFone 3s Max Access Control Error Vulnerability

The ASUS ZenFone 3s Max is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3s Max. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit th...

ASUS ZenFone 3 Laser Access Control Error Vulnerability

The ASUS ZenFone 3 Laser is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 3 Laser. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

ASUS ZenFone 4 Selfie Access Control Error Vulnerability

The ASUS ZenFone 4 Selfie is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 4 Selfie. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can...

ASUS ZenFone 4 Selfie Access Control Error Vulnerability (CNVD-2020-14745)

The ASUS ZenFone 4 Selfie is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 4 Selfie. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can...

ASUS ZenFone 5 Selfie Access Control Error Vulnerability

The ASUS ZenFone 5 Selfie is a smartphone from Asus ASUS of Taiwan, China. An Access Control Error vulnerability exists in ASUS ZenFone 5 Selfie. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker can exploi...