ASUS HG100 - Denial of Service

ASUS HG100 - Denial of Service Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1...

ASUS HG100 Denial of Service Vulnerability

ASUS HG100 is a home smart monitoring device from ASUS. A denial of service vulnerability exists in ASUS HG100. An attacker can exploit this vulnerability to cause a denial of service with a large number of IPv4 packets...

CVE-2018-11492

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

Design/Logic Flaw

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

CVE-2018-11492

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

CVE-2018-11492

CVE-2018-11492 affects ASUS HG100 devices, enabling denial of service via an IPv4 packet flood. Public documentation describes DoS achievable from the local network by sending crafted IPv4 packets to crash the device, with PoCs using hping3/SlowHTTPDoS and references noting hardware version HG100...

CVE-2018-11492: Undefined Security Weakness

ASUS HG100 devices allow denial of service via an IPv4 packet flood...

ASUS HG100 Command Execution Vulnerability

ASUS HG100 is a home smart monitoring device from ASUS. A command execution vulnerability exists in ASUS HG100 using firmware versions prior to 1.05.12. A remote attacker could exploit the vulnerability to execute commands...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

Command injection

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2018-11491

Consolidated evidence identifies a CVE for ASUS HG100 devices. Affected: ASUS HG100 home smart monitoring device running firmware versions prior to 1.05.12. Issue: command execution via unauthenticated access, enabling remote code execution. Root cause details are stated in CNVD-2018-17185 as a v...

CVE-2018-11491: Improper Authentication

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution...

CVE-2017-7317

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

Design/Logic Flaw

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

CVE-2017-7317

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...

CVE-2017-7317

Summary: CVE-2017-7317 affects Humax Digital HG100 router devices (HG100, firmware 2.0.6). The vulnerability arises because the root credentials can be found in the backup file GatewaySettings.bin, enabling an attacker to obtain credentials stored in plaintext. This impacts confidentiality, integ...

CVE-2017-7317: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...