Lucene search
+L

5760 matches found

CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•12 views

ASUS RT-AC51U 安全漏洞

The ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U 3.0.0.4.380.8591 and earlier versions, which originates from a vulnerability that allows a local attacker to cause a denial of service via a crafted GET request...

5.5CVSS6.3AI score0.00153EPSS
SaveExploits0References2
Photon
Photon
•added 2024/04/29 12:00 a.m.•35 views

Important Photon OS Security Update - PHSA-2024-3.0-0753

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'sssd' packages of Photon OS have been released...

7.8CVSS6.5AI score0.01033EPSS
SaveExploits1
NVD
NVD
•added 2024/04/26 8:15 p.m.•23 views

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

6.8CVSS6.3AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/26 7:15 p.m.•23 views

CVE-2024-28327

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings...

8.4CVSS6.3AI score0.00142EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/04/26 3:15 p.m.•9 views

CVE-2024-28328

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format...

5.4CVSS6.2AI score0.00373EPSS
SaveExploits0References3
NVD
NVD
•added 2024/04/26 3:15 p.m.•31 views

CVE-2024-28328

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format...

5.4CVSS7AI score0.00373EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•17 views

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

6.5AI score0.00274EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•14 views

ASUS RT-N12 安全漏洞

ASUS RT-N12 is a router from Asus China. A security vulnerability exists in the ASUS RT-N12+ B1 that originates from storing user passwords in clear text, which could allow a local attacker to gain unauthorized access and modify router settings...

8.4CVSS6.7AI score0.00142EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•15 views

ASUS RT-N12 安全漏洞

The ASUS RT-N12+ B1 is a wireless router. An elevation of privilege vulnerability exists in the ASUS RT-N12+ B1, which can be exploited by an attacker to bypass security restrictions caused by incorrect access control and gain root terminal access via the UART interface by sending a specially...

6.8CVSS7.2AI score0.00274EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•34 views

CVE-2024-28327

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings...

6.5AI score0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•19 views

CVE-2024-28325

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings...

6.7AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/26 12:00 a.m.•88 views

CVE-2024-28325

The Asus RT-N12+ B1 router contains a security vulnerability due to the insufficient protection of registration data within its microprogramming software. Specifically, the device stores credentials in cleartext , which could allow a local attacker to obtain unauthorized access to protected infor...

6.1CVSS6.6AI score0.00146EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•0 views

CVE-2024-28326: Improper Physical Access Control

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

6.8CVSS5.8AI score0.00274EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•3 views

CVE-2024-28328: Improper Neutralization of Special Elements used in a Command

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format...

5.4CVSS6AI score0.00373EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•30 views

PT-2024-4605 · Asus · Asus Rt-N12+ B1

Name of the Vulnerable Software and Affected Versions: ASUS RT-N12+ B1 version affected versions not specified Description: The issue is related to a lack of data sanitization on the administrative level, allowing for the exploitation of a CSV injection vulnerability. This vulnerability enables a...

5.4CVSS8.2AI score0.00373EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•33 views

CVE-2024-28328

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format...

7.3AI score0.00373EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•33 views

CVE-2024-28326

Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface...

6.5AI score0.00274EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•2 views

CVE-2024-28325: Plaintext Storage of a Password

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings...

6.1CVSS5.8AI score0.00146EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•18 views

CVE-2024-28328

CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client name parameter which can be triggered and executed in a different user session upon exporting to CSV format...

7.3AI score0.00373EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•3 views

CVE-2024-28327: Cleartext Storage of Sensitive Information

Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings...

8.4CVSS5.8AI score0.00142EPSS
SaveExploits0References2
Rows per page
Query Builder