PT-2024-20959 · Asus · Asus Download Master

Name of the Vulnerable Software and Affected Versions: ASUS Download Master affected versions not specified Description: The issue allows an attacker to execute commands in the context of the web server, running as admin. Recommendations: At the moment, there is no information about a newer versi...

ASUS RT-AC88U Injection Vulnerability

The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

CVE-2020-29655

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to...

CVE-2020-29655

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to...

Information disclosure

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

CVE-2020-29655

CVE-2020-29655 affects ASUS RT-AC88U Download Master prior to version 3.1.0.108. The root cause is unsanitized input passed through Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp, which leads to text injection in the login page title and could influence its appearance. Publ...

CVE-2020-29655

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to...

CVE-2020-29656

The CVE-2020-29656 entry describes an information disclosure in RT-AC88U Download Master before 3.1.0.108. A direct request to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language can reveal sensitive information by accessing an otherwise unknown functio...

CVE-2020-29656

An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dmapply.cgi?actionmode=initial&downloadtype=General&specialcgi=getlanguage makes it possible to reach "unknown functionality" in a "known to be easy" manner via an...

ASUS RT-AC88U 注入漏洞

The ASUS RT-AC88U is a wireless router from the Chinese company ASUS. An injection vulnerability exists in ASUS RT-AC88U Download Master versions prior to 3.1.0.108, which originates from MainLogin.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp without filtering user input. An attacke...

ASUS RT-AC88U Information Disclosure Vulnerability

The ASUS RT-AC88U is a wireless router from Asus China. An information disclosure vulnerability exists in RT-AC88U Download Master versions prior to 3.1.0.108, which stems from allowing direct access to the downloadmaster dm app .cgi...