CVE-2013-5948

The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...

CVE-2014-2925

CVE-2014-2925 is an XSS vulnerability in ASUS RT-AC68U and other RT-series routers, exploitable via the current_page parameter to apply.cgi in Advanced_Wireless_Content.asp on firmware prior to 3.0.0.4.374.5047. Affected devices accept remote script/HTML injection without authentication, with pot...

CVE-2014-2719

The CVE affects ASUS RT series routers with firmware prior to 3.0.0.4.374.5517. The vulnerability arises in Advanced_System_Content.asp: when an administrator session is active, remote authenticated users can read the page source to obtain the administrator username and password. Impact is creden...

PT-2014-3002

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC68U and other RT series routers versions prior to 3.0.0.4.374.5047 Description: The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the destIP parameter in the Target field of the...

Asus RT Password Disclosure Vulnerability

ASUS RT series of routers disclose administrative credentials. This is true for the RT-AC68U, RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U models. In mid February, I wrote that a substantial portion of ASUS wireless routers would fail to update their...

ASUS RT Password Disclosure

http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html In mid February, I wrote that a substantial portion of ASUS wireless routers would fail to update their firmware. In fact, the "check for update" function would inform the administrator that the router was fully...

ASUS RT Series Routers FTP Service - Default anonymous access

Five ASUS RT series routers suffer from a vendor vulnerability that default FTP service to anonymous access, full read/write permissions. The service, which is activated from the administrative console does not give proper instructions nor indications that the end user needs to manually add a use...

ASUS router drive-by code execution via XSS and authentication bypass

ASUS router drive-by code execution via XSS and authentication bypass ===================================================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/asus-router-auth-bypass.txt Overview -------- Various ASUS routers contai...

ASUS RT-AC68U Cross Site Scripting Vulnerability

ASUS RT-AC68U web management interface suffers from a reflective cross site scripting vulnerability. =====Alligator Security Team - Security Advisory============================ Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface Author: Joaquim Brasil de Oliveira...

ASUS RT-AC68U Remote Command Execution Vulnerability

ASUS RT-AC68U web management interface suffers from a remote command execution vulnerability. =====Alligator Security Team - Security Advisory============================ Remote Command Execution within the ASUS RT-AC68U Managing Web Interface Author: Joaquim Brasil de Oliveira =====Table of...

ASUS RT-AC68U Remote Command Execution

=====Alligator Security Team - Security Advisory============================ Remote Command Execution within the ASUS RT-AC68U Managing Web Interface Author: Joaquim Brasil de Oliveira =====Table of Contents====================================================== 1. Overview 2. Detailed description...

ASUS RT-AC68U Cross Site Scripting

=====Alligator Security Team - Security Advisory============================ Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface Author: Joaquim Brasil de Oliveira =====Table of Contents====================================================== 1. Overview 2. Detailed...

ASUS routers Remote FTP login Authentication Bypass Vulnerability

============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do more around your home Easy to set up and use,...

多个ASUS路由器跨站脚本和验证绕过漏洞

No description provided by source...

ASUS Router Multiple Vulnerabilities

The host is running ASUS Router and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodasusroutersmultvuln.nasl 6663 2017-07-11 09:58:05Z teissa $ ASUS Router Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright C 2014 SecPod, http://www.secpod.com This...

ASUS Router Multiple Vulnerabilities (Feb 2014) - Active Check

ASUS Routers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ASUS Routers flag Parameter XSS

The remote web server fails to sanitize user-supplied input to the 'flag' parameter of the 'errorpage.htm' script before using it to generate dynamic HTML output. An attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the...

ASUS Router Authentication Bypass / Cross Site Scripting

ASUS router drive-by code execution via XSS and authentication bypass ===================================================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/asus-router-auth-bypass.txt Overview -------- Various ASUS routers contai...

Asus routers authentication bypass

AiCloud authentication bypass...

ASUS AiCloud Enabled Routers 12 Models - Authentication bypass and Sensitive file/path disclosure

ASUS routers, which are enabled with the AiCloud service SSL ports, are vulnerable to bypass of authentication and sensitive file disclosure. This vulnerability has been observed in all firmware versions, though the latest version increases the complexity of the attack. By sending a special craft...