CVE-2024-55408

In CVE-2024-55408, the affected component is the Asus System Analysis IO driver (AsusSAIO.sys). The root cause is improper access control in the driver, which may allow misuse of software functionality when crafted IOCTL requests are supplied. The documented impact is the ability to perform arbit...

CVE-2024-55408

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied...

ASUS System Analysis IO 安全漏洞

ASUS System Analysis IO is a module in a diagnostic software from Asus China. A security vulnerability exists in ASUS System Analysis IO version 1.0.0, which stems from a problem with the AsusSAIO.sys component that allows an attacker to perform arbitrary read and write operations by supplying a...

The vulnerability of the ASUS AiCloud cloud platform, which stems from the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary codes.

The vulnerability of the ASUS AiCloud cloud platform lies in the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-13062

An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-13062

The ASUS Router AiCloud component is affected by CVE-2024-13062. The vulnerability stems from insufficient data cleaning at the management level, enabling a remote attacker to execute arbitrary commands. Affected product: ASUS Router AiCloud (AiCloud), with unspecified vulnerable versions. The is...

CVE-2024-12912

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

CVE-2024-12912

CVE-2024-12912 describes an improper input insertion vulnerability in ASUS AiCloud on certain router models that may lead to arbitrary command execution. The vulnerability is documented with a network attack vector, requiring high privileges and no user interaction, and it has a high impact on co...

ASUS AiCloud 安全漏洞

ASUS AiCloud is a router control program from Asus China. A security vulnerability exists in ASUS AiCloud. An attacker could execute arbitrary commands by exploiting the vulnerability...

ASUS AiCloud 安全漏洞

ASUS AiCloud is a router control program from Asus China. A security vulnerability exists in ASUS AiCloud that stems from the presence of incorrect input insertion, which could lead to arbitrary command execution...

PT-2025-1262 · Asus · Asus Router Aicloud

Name of the Vulnerable Software and Affected Versions: ASUS Router AiCloud affected versions not specified Description: An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. The vulnerability is related to the lack o...

PT-2025-37969

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A user-after-free vulnerability exists in the Linux kernel related to HID Human Interface Device processing, specifically within the handling of ASUS ROG N-Key keyboards. A maliciously...

The vulnerability of ASUS RT-AX55, RT-AX55 V2, RT-AX56U, RT-AX56U V2, RT-AX57, RT-AX58U, and RT-AX58U V2 router microprogramming software lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of ASUS RT-AX55, RT-AX55 V2, RT-AX56U, RT-AX56U V2, RT-AX57, RT-AX58U, and RT-AX58U V2 microprogrammed router software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2022-29974

AMI aka American Megatrends NTFS driver 1.0.0 fixed in late 2021 or early 2022 has a buffer overflow. This driver is, for example, used in certain ASUS devices...

CVE-2022-29974

AMI aka American Megatrends NTFS driver 1.0.0 fixed in late 2021 or early 2022 has a buffer overflow. This driver is, for example, used in certain ASUS devices...

CVE-2022-29974

AMI aka American Megatrends NTFS driver 1.0.0 fixed in late 2021 or early 2022 has a buffer overflow. This driver is, for example, used in certain ASUS devices...

CVE-2022-29974

AMI NTFS driver 1.0.0 contains a buffer overflow vulnerability. The driver is used in certain ASUS devices. The issue was fixed by AMI in late 2021 or early 2022; downstream products may not reflect the fix yet. Red Hat records the same description. Practical impact is a potential overflow in the...

CVE-2024-11985

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information...