Networkmap Buffer Overflow Vulnerability in Multiple ASUS Products

ASUS RT-AC5300 and others are wireless routers from ASUS. networkmap is one of the network diagram components. A buffer overflow vulnerability exists in networkmap in several ASUS products. A remote attacker can exploit this vulnerability to execute arbitrary code on the router...

The vulnerability in the ASUS_Discovery.c file of the embedded microprogramming software Asuswrt-Merlin for Asus device networking cards allows a hacker to execute arbitrary code.

The vulnerability in the AsusDiscovery.c file of the embedded microprogramming software for Asus’ device networking cards is caused by buffer overflows on the stack incorrect invocation of the strcat function during the reading of the device list. Exploiting this vulnerability allows a remote...

Networkmap buffer overflow vulnerability in multiple ASUS products (CNVD-2017-35393)

ASUS RT-AC5300 and others are wireless routers from ASUS. networkmap is one of the network map components. A buffer overflow vulnerability exists in networkmap in multiple ASUS products. A remote attacker can exploit this vulnerability to execute arbitrary code on the router...

Multiple ASUS Products Asuswrt-Merlin httpd Stack Buffer Overflow Vulnerability

ASUS RT-AC5300 and others are wireless routers from Asus ASUS. asus Asuswrt-Merlin is the firmware that runs in it. httpd is one of the embedded http servers. A stack buffer overflow vulnerability exists in Asuswrt-Merlin 380.670RT-AC5300 and prior versions of httpd in several ASUS products. A...

ASUS DSL-N10S Cross-Site Request Forgery Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site request forgery vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to perform unauthorized operations...

ASUS DSL-N10S Cross-Site Scripting Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A cross-site scripting vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

ASUS DSL-N10S Elevation of Privilege Vulnerability

ASUS DSL-N10S is a wireless router product from ASUS. A privilege extraction vulnerability exists in ASUS DSL-N10S version V2.1.16APAC. An attacker can exploit this vulnerability to gain privileges and perform administrative operations...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12592

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

Cross site scripting

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

Cross site request forgery (csrf)

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

Privilege escalation

ASUS DSL-N10S V2.1.16APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative actions. There is no mapping of users with their privileges...

CVE-2017-12593

Affected product : ASUS DSL-N10S V2.1.16_APAC. Vulnerability : Cross‑Site Request Forgery (CSRF) in the device. Root cause/condition : Exploitation to induce unauthorized operations by a remote attacker. Impact : Confidentiality/Integrity/Availability implications described as high in CVSS metric...

CVE-2017-12593

ASUS DSL-N10S V2.1.16APAC devices allow CSRF...

CVE-2017-12591

ASUS DSL-N10S V2.1.16APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter...

CVE-2017-12591

CVE-2017-12591 affects ASUS DSL-N10S V2.1.16_APAC. The vulnerability is a cross‑site scripting (XSS) flaw in the snmpSysName parameter, allowing reflected and stored XSS on the device. Root cause: improper handling of the snmpSysName input. Impact is described as XSS with low to medium overall se...