CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

Information disclosure

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-5892

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

CVE-2017-8877

ASUS RT-AC and RT-N devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID...

CVE-2017-5892

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network map...

CVE-2017-8877

Consolidated risk: CVE-2017-8877 affects ASUS RT-AC* and RT-N* routers with firmware up to 3.0.0.4.380.7378. The connected CNVD entry and NVD description indicate an information-disclosure flaw in which JSONP responses can reveal sensitive data (notably the SSID). No explicit exploit details, aff...

CVE-2017-5891

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF...

CVE-2017-8878

ASUS RT-AC and RT-N devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPSinfo.xml...

CVE-2017-5892

ASUS RT-AC* and RT-N* routers with firmware older than 3.0.0.4.380.7378 expose a JSONP information-disclosure flaw that can reveal router data such as a network map. The vulnerability is covered by CVE-2017-5892. Most CSRF-related issues were fixed in firmware 3.0.0.4.380.7378; the JSONP informat...

CVE-2017-8878

This entry covers ASUS RT-AC* and RT-N* routers with firmware prior to 3.0.0.4.380.7378. It describes an information-disclosure vulnerability where remote authenticated users can obtain the Wi-Fi password via WPS_info.xml. Impact is partial confidentiality (password exposure) with no integrity or...

CVE-2017-5891

CVE-2017-5891 covers CSRF vulnerabilities in ASUS RT-AC* and RT-N* routers prior to firmware 3.0.0.4.380.7378, enabling login and settings changes via the router’s web interface from an attacker-controlled site. Affected models include RT-AC55U/56R/56S/56U/66U/66R/66W/66U family, RT-AC68K/R/U var...

ASUS B1M projector remote commands execution Vulnerability

We recently obtained a ASUS B1M projector0 and have been exploring its capabilities when we discovered trivial to exploit vulnerabilities. The ASUS B1M features a small Wi-Fi adapter for a direct wireless connection to a notebook PC, or Android and iOS devices. The projector comes with an embedde...

PCAUSA Rawether for Windows local privilege escalation

Rawether for Windows is a framework that facilitates communication between an application and the NDIS miniport driver. It’s produced by a company named Printing Communications Assoc., Inc. PCAUSA, which seems to be no longer operating. Company websites can be still reached through web.archive.or...

PCAUSA Rawether (ASUS PCE-AC56 WLAN Card Utilities Windows 10 x64) - Local Privilege Escalation

PCAUSA Rawether ASUS PCE-AC56 WLAN Card Utilities Windows 10 x64 - Local Privilege Escalation Exploit Title: PCAUSA Rawether for Windows local privilege escalation Date: 2017-03-15 Exploit Author: ReWolf Vendor Homepage: original vendor website doesn't exist anymore Version: too many Tested on:...

ASUS PCE-AC56 WLAN Card Utilities (PCAUSA Rawether Windows 10 x64) - Local Privilege Escalation Expl

Exploit for windows platform in category local exploits Rawether for Windows is a framework that facilitates communication between an application and the NDIS miniport driver. It’s produced by a company named Printing Communications Assoc., Inc. PCAUSA, which seems to be no longer operating...

ASUS PCE-AC56 WLAN Card Utilities (PCAUSA Rawether Windows 10 x64) - Local Privilege Escalation

ASUS PCE-AC56 WLAN Card Utilities PCAUSA Rawether Windows 10 x64 - Local Privilege Escalation. Local exploit for Winx86-64 platform Rawether for Windows is a framework that facilitates communication between an application and the NDIS miniport driver. It’s produced by a company named Printing...

PCAUSA Rawether (ASUS PCE-AC56 WLAN Card Utilities Windows 10 x64) - Local Privilege Escalation

Exploit Title: PCAUSA Rawether for Windows local privilege escalation Date: 2017-03-15 Exploit Author: ReWolf Vendor Homepage: original vendor website doesn't exist anymore Version: too many Tested on: Windows 10 x64 TH2, RS1 Rawether for Windows is a framework that facilitates communication...

CVE-2013-4659

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...

Buffer overflow

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU...