CVE-2024-3079 ASUS Router - Stack-based Buffer Overflow

Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device...

CVE-2024-3079 ASUS Router - Stack-based Buffer Overflow

Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device...

CVE-2024-3079

CVE-2024-3079 is a buffer overflow vulnerability in certain ASUS routers that allows remote attackers with administrative privileges to execute arbitrary commands. Connected sources confirm affected models (e.g., ZenWiFi XT8, RT-AX88U, RT-AX58U, RT-AX57, RT-AC86U, RT-AC68U) and indicate ASUS rele...

ASUS routers security vulnerability

ASUS routers is a router app from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Router. A remote attacker could exploit the vulnerability to execute arbitrary commands on the device...

PT-2024-23799 · Asus · Asus Download Master

Name of the Vulnerable Software and Affected Versions: ASUS Download Master affected versions not specified Description: The issue concerns a parameter in a certain page of ASUS Download Master that is not properly filtered for user input. This allows a remote attacker with administrative privile...

PT-2024-4209

Name of the Vulnerable Software and Affected Versions ASUS routers affected versions not specified Description The issue concerns an arbitrary firmware upload vulnerability in certain ASUS router models. This vulnerability can be exploited by an unauthenticated remote attacker to execute arbitrar...

ASUS Router Code Issue Vulnerability

ASUS routers is a router app from the Chinese company Asus ASUS. A code issue vulnerability exists in ASUS Router. A remote attacker could exploit this vulnerability to execute arbitrary system commands on the device...

ASUS Router Authorization Issues Vulnerability

ASUS routers is a router app from the Chinese company Asus ASUS. An authorization issue vulnerability exists in ASUS Router that stems from allowing remote attackers to log in to the device...

PT-2024-23800 · Asus · Asus Download Master

Name of the Vulnerable Software and Affected Versions: ASUS Download Master affected versions not specified Description: The issue arises from a parameter in a certain page of ASUS Download Master that is not properly filtered for user input. This allows a remote attacker with administrative...

ASUS Download Master Code Issue Vulnerability

ASUS Download Master is a download program from Asus China Inc. A code issue vulnerability exists in ASUS Download Master version 3.1.0.113 and prior versions, which stems from not properly filtering user input...

ASUS Download Master 跨站脚本漏洞

ASUS Download Master is a download program from the Chinese company Asus ASUS. A cross-site scripting vulnerability exists in ASUS Download Master version 3.1.0.113 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be...

ASUS Download Master Security Vulnerability

ASUS Download Master is a download program from Asus China Inc. A security vulnerability exists in ASUS Download Master version 3.1.0.113 and prior versions, which stems from a feature-specific parameter that does not properly filter user input...

ASUS Download Master 跨站脚本漏洞

ASUS Download Master is a download program from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Download Master, which can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload...

PT-2024-23615 · Asus · Asus Routers

Name of the Vulnerable Software and Affected Versions: ASUS routers affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in certain models of ASUS routers. These vulnerabilities allow remote attackers with administrative privileges to execute...

PT-2024-5045

Name of the Vulnerable Software and Affected Versions: ASUS router models affected versions not specified Description: The issue is related to an authentication bypass vulnerability in certain ASUS router models, allowing unauthenticated remote attackers to log in to the device. This vulnerabilit...

ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE) & SSH Access

Exploit Title: ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution RCE & SSH Access Date: 2023-02-16 Exploit Author: [email protected] for NetworkSEC NWSSA-002-2023 Vendor Homepage: https://servers.asus.com/search?q=ASMB8 Version/Model: ASMB8 iKVM Firmware = 1.14.51 probably others Tested on: Linux...

CVE-2021-47262

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message Use the string machinery provided by the tracing subystem to make a copy of the string literals consumed by the "nested VM-Enter failed" tracepoint. A complet...

CVE-2024-33220

An issue in the component AslO364.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...

CVE-2024-33223

CVE-2024-33223 affects ASUS GPU TweakII v1.4.5.2; the issue lies in the IOMap64.sys component, enabling attackers to escalate privileges and execute arbitrary code by sending crafted IOCTL requests. Mitigation from PT-Security recommends disabling IOMap64.sys until a patch is available. Documenta...