213 matches found
Unspecified Vulnerability in ASUSWRT
ASUSWRT is a firmware from Asus Taiwan, China that runs in its routers. A security vulnerability exists in ASUSWRT version 3.0.0.4.384.20308. An attacker can exploit this vulnerability to cause a denial of service with the help of /APPInstallation.asp?= URI...
ASUSWRT Information Disclosure Vulnerability
ASUSWRT is a firmware from Asus Taiwan, China that runs in its routers. A security vulnerability exists in ASUSWRT version 3.0.0.4.384.20308. An attacker can exploit the vulnerability by requesting /updateapplist.asp to see if a USB device is connected to the router and if an application is...
CVE-2018-20334: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /startapply.htm POST data, there is a command injection issue via shell metacharacters in the fbemail parameter. By using this issue, an attacker can control the router and get shell...
ASUS Asuswrt-Merlin Information Disclosure Vulnerability (CNVD-2020-17192)
ASUS Asuswrt-Merlin is a firmware from Asus ASUS of Taiwan, China that runs in its routers. An information disclosure vulnerability exists in ASUS Asuswrt-Merlin. An attacker can exploit the vulnerability by reading the newlanip variable on the errorpage.htm page to obtain information about the...
ASUS Asuswrt-Merlin Information Disclosure Vulnerability
ASUS Asuswrt-Merlin is a firmware from Asus ASUS of Taiwan, China that runs in its routers. An information disclosure vulnerability exists in ASUS Asuswrt-Merlin. An attacker could exploit this vulnerability by reading the customid variable on the blocking.asp page to obtain information about the...
Asus ASUSWRT Buffer Overflow (CVE-2018-14712)
A buffer overflow vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to inaccessibility on the affected system...
Asus ASUSWRT Command Injection (CVE-2018-14714)
A command injection vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Asus ASUSWRT Information Disclosure (CVE-2018-14713)
An information disclosure vulnerability exists in Asus ASUSWRT. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
CVE-2018-8878
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...
CVE-2018-8877
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the newlanip variable on the errorpage.htm page...
CVE-2018-8878
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...
CVE-2018-8877
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the newlanip variable on the errorpage.htm page...
CVE-2018-8878
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...
Information disclosure
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the newlanip variable on the errorpage.htm page...
CVE-2018-8877
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the newlanip variable on the errorpage.htm page...
Information disclosure
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...
CVE-2018-8878
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...
CVE-2018-8878
CVE-2018-8878 affects Asuswrt-Merlin firmware on ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470. The vulnerability allows remote attackers to read the custom_id variable on the blocking.asp page, enabling information disclosure of internal network hostnames and MAC addre...
CVE-2018-8877
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the newlanip variable on the errorpage.htm page...
CVE-2018-8877
CVE-2018-8877 affects Asuswrt-Merlin firmware on ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470. The issue is an information disclosure: remote attackers can read the new_lan_ip variable on error_page.htm to learn internal network IP address ranges. Root cause is reading...