ASUS-DSL N10 1.1.2.2_17 - Authentication Bypass

ASUS-DSL N10 1.1.2.217 - Authentication Bypass Title: ASUS-DSL N10 1.1.2.217 - Authentication Bypass Author: AmnBAN team Date: 2018-08-06 Vendor Homepage: https://www.asus.com/Networking/DSLN10C1with5dBiantenna/ Sofrware version: 1.1.2.217 CVE: N/A 1. Description: In ASUS-DSL N10 C1 modem Firmwar...

ASUS-DSL N10 1.1.2.2_17 - Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Title: ASUS-DSL N10 1.1.2.217 - Authentication Bypass Author: AmnBAN team Vendor Homepage: https://www.asus.com/Networking/DSLN10C1with5dBiantenna/ Sofrware version: 1.1.2.217 CVE: N/A 1. Description: In ASUS-DSL N10 C1 modem Firmware...

ASUS HG100 Denial of Service Vulnerability

ASUS HG100 is a home smart monitoring device from ASUS. A denial of service vulnerability exists in ASUS HG100. An attacker can exploit this vulnerability to cause a denial of service with a large number of IPv4 packets...

CVE-2018-11492

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

Design/Logic Flaw

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

CVE-2018-11492

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

CVE-2018-11492

CVE-2018-11492 affects ASUS HG100 devices, enabling denial of service via an IPv4 packet flood. Public documentation describes DoS achievable from the local network by sending crafted IPv4 packets to crash the device, with PoCs using hping3/SlowHTTPDoS and references noting hardware version HG100...

Black Hat 2018: Update Mechanisms Allow Remote Attacks on UEFI Firmware

LAS VEGAS – Researchers said they found buffer overflow flaws in the firmware for ASRock and ASUS, potentially enabling bad actors to remotely launch man-in-the-middle MITM attacks. The findings, which will be presented Wednesday at Black Hat USA this week by researchers from Eclypsium, show that...

ASUS DSL-N12E C1 1.1.2.3_345 - Remote Command Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: ASUS DSL-N12EC1 1.1.2.3345 - Remote Command Execution Date: 2018-08-02 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.asus.com/ Software Link: https://www.asus.com/Networking/DSLN12EC1/HelpDeskBIOS/...

ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution

ASUS DSL-N12EC1 1.1.2.3345 - Remote Command Execution Exploit Title: ASUS DSL-N12EC1 1.1.2.3345 - Remote Command Execution Date: 2018-08-02 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.asus.com/ Software Link: https://www.asus.com/Networking/DSLN12EC1/HelpDeskBIOS/...

ASUS DSL-N12E_C1 1.1.2.3_345 Remote Command Execution

Exploit Title: ASUS DSL-N12EC1 1.1.2.3345 - Remote Command Execution Date: 2018-08-02 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.asus.com/ Software Link: https://www.asus.com/Networking/DSLN12EC1/HelpDeskBIOS/ Version: 1.1.2.3345 Tested on: 1.1.2.3345 GET...

ASUS DSL-N12E_C1 1.1.2.3_345 - Remote Command Execution

Exploit Title: ASUS DSL-N12EC1 1.1.2.3345 - Remote Command Execution Date: 2018-08-02 Exploit Author: Fakhri Zulkifli @d0lph1n98 Vendor Homepage: https://www.asus.com/ Software Link: https://www.asus.com/Networking/DSLN12EC1/HelpDeskBIOS/ Version: 1.1.2.3345 Tested on: 1.1.2.3345 GET...

ASUS HG100 Command Execution Vulnerability

ASUS HG100 is a home smart monitoring device from ASUS. A command execution vulnerability exists in ASUS HG100 using firmware versions prior to 1.05.12. A remote attacker could exploit the vulnerability to execute commands...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

Command injection

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

Consolidated evidence identifies a CVE for ASUS HG100 devices. Affected: ASUS HG100 home smart monitoring device running firmware versions prior to 1.05.12. Issue: command execution via unauthenticated access, enabling remote code execution. Root cause details are stated in CNVD-2018-17185 as a v...

ASUS WL-330NUL Cross-Site Request Forgery Vulnerability

The WL-330NUL is a portable wireless LAN router offered by ASUS Japan. The ASUS WL-330NUL suffers from a cross-site request forgery vulnerability that could allow a user to perform unexpected actions on the device if they view a malicious page while logged into the administration screen...

JVN#71329812: WL-330NUL vulnerable to cross-site request forgery

WL-330NUL provided by ASUS Japan Inc. is a portable wireless LAN router. WL-330NUL contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in the management screen, unintended operations may be performed on the device. Solution Update the...