3042 matches found
CVE-2024-33222
An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...
CVE-2021-32030
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.438446630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handlereques...
CVE-2022-38105
An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...
CVE-2022-38393
A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this...
CVE-2024-12912
An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...
CVE-2024-13062
An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...
CVE-2024-0401
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U,...
The vulnerability of the ASUS AiCloud cloud platform, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of the ASUS AiCloud cloud platform lies in the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CVE-2024-12957
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information...
CVE-2024-12957
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information...
CVE-2024-12957
CVE-2024-12957 is a file handling command vulnerability in Armoury Crate that may result in arbitrary file deletion. Affected products are Armoury Crate versions as referenced by ASUS/Red Hat advisories; the underlying issue is a faulty file handling command leading to deletion of files. The avai...
ASUS Armoury Crate Service 访问控制错误漏洞
ASUS Armoury Crate Service is a software utility program from Asus China. It is designed to provide centralized control over supported ROG gaming products. An access control error vulnerability exists in ASUS Armoury Crate Service. An attacker can exploit this vulnerability to delete arbitrary...
PT-2025-1981 · Asus · Armoury Crate
The Armoury Crate App is affected by a file handling command issue that can lead to arbitrary file deletion. The affected software is Armoury Crate, and an exploit for this issue is available. Unfortunately, the specific versions of Armoury Crate that are affected are not specified. More...
CVE-2024-55410
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-55410
CVE-2024-55410 has been withdrawn by its CNA. Connections show a vulnerability involving the Asus GPU Tweak II Program Driver (v1.0.0.0) in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component, where crafted IOCTL requests enable arbitrary read/write actions. Public technical details are limite...
CVE-2024-55410
An issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component of Asus GPU Tweak II Program Driver v1.0.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
编号撤回
ASUS GPU Tweak is a GPU tuning tool from Asus China. This CVE number has been withdrawn...