3093 matches found
[Full-disclosure] Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0
Luigi Auriemma Application: Asus Video Security http://www.asus.com/products1.aspx?l1=2&share=icon/12 Versions: = 3.5.0.0 the version number is chaotic, this one seems the most recent but doesn't exist an official website with the latest updates and Asus didn't reply to me Platforms: Windows Bugs...
Asus VideoSecurity Online 3.5 - Web Server Authentication Buffer Overflow
/ source: https://www.securityfocus.com/bid/15279/info Asus VideoSecurity Online is prone to a buffer overflow in the authentication mechanism of the included Web server. This issue only exists if authentication is enabled on the Web server. The Web server included with Asus VideoSecurity Online ...
Fedora Core 2 : kernel-2.6.6-1.427 (2004-137)
An updated kernel is available that brings the kernel to the 2.6.7-rc3 base level. This new kernel provides a significant number of bug fixes and improvements for USB, the keyboard/mouse subsystem and the VM. This kernel also fixes the high profile bugs about not working on VIA C3 processors 1206...
Asus AAM6000EV unauthorized web access
It's possible to obtain configuration files though web interface...
Asus AAM6000EV ADSL Router Wide Open
Asus have been notified but haven't even acknowledged yet alone mentioned a fix. If the inbuilt webserver is activated, anyone on the local network can get the full user/pass list from the router without any identification whatsoever by going to the ip address of the router and appending /userdat...
Asus AAM6330BIAAM6000EV ADSL Router - Information Disclosure
Asus AAM6330BIAAM6000EV ADSL Router - Information Disclosure source: https://www.securityfocus.com/bid/8183/info It has been reported that remote users may be able to obtain sensitive information from Asus ADSL routers. It is possible to request files from the built-in Web server that contain...
Asus AAM6330BI/AAM6000EV ADSL Router - Information Disclosure
source: https://www.securityfocus.com/bid/8183/info It has been reported that remote users may be able to obtain sensitive information from Asus ADSL routers. It is possible to request files from the built-in Web server that contain information such as usernames, passwords and other configuration...
CVE-2023-47007
The CVE-2023-47007 entry is linked to Asus RT-AX57 firmware, vulnerable in the sub 391B8 function due to insufficient input validation. A remote attacker could execute arbitrary code via a crafted request to the lan ifname field (ASUS RT-AX57, version 3.0.0.4 386 52041). Mitigation guidance in th...
CVE-2023-47008
Product: ASUS RT-AX57 router (firmware 3.0.0.4 386 52041). Vulnerability: Insufficient input validation in the sub 4CCE4 function of the firmware; allows a remote attacker to execute arbitrary code via a crafted request to the ifname field. Impact: Remote code execution possible on affected devic...
CVE-2023-47005
Concrete details link a vulnerability to ASUS RT-AX57 (PT-2023-7096): version 3.0.0.4 386 52041 is affected. The issue arises from insufficient input validation in the sub ln 2C318 function of the router’s microprogram, enabling a remote attacker to execute arbitrary code by crafting a request to...
CVE-2023-47006
CVE-2023-47006 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2024-33221
An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
