CVE-2023-34360 ASUS RT-AX88U - Stored XSS

A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...

CVE-2023-34360

ASUS RT-AX88U is affected by a stored XSS in the Custom User Icons feature. The vulnerability arises from insufficient input validation/escaping, enabling an attacker who logs in with regular user privileges to upload an image containing JavaScript to trigger a stored XSS. Affected firmware versi...

CVE-2023-34358

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

CVE-2023-34359

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...

Design/Logic Flaw

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

Design/Logic Flaw

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...

CVE-2023-34359 ASUS RT-AX88U - Out-of-bounds Read - 2

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...

CVE-2023-34359 ASUS RT-AX88U - Out-of-bounds Read - 2

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...

CVE-2023-34359

ASUS RT-AX88U exposes a DoS vulnerability in httpd caused by a buffer/ej.c do_json_decode() mismanagement. Remote attackers can trigger via specially crafted requests to crash the httpd binary, yielding unauthenticated denial of service. Public sources in the CVE describe the issue as an unauthen...

CVE-2023-34358

The CVE-2023-34358 entry applies to the ASUS RT-AX88U router (httpd). Affected component: httpd, vulnerable in the web.c string comparison when processing a crafted User-Agent, leading to an unauthenticated DoS (remote attacker can crash the httpd binary). Root cause appears to be input handling ...

CVE-2023-34358 ASUS RT-AX88U - Out-of-bounds Read - 1

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

CVE-2023-34358 ASUS RT-AX88U - Out-of-bounds Read - 1

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

CVE-2023-34360: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site...

CVE-2023-34359: Out-of-bounds Read

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "dojsondecode" function of ej.c, resulting in a DoS condition...

ASUS RT-AX88U 缓冲区错误漏洞

The ASUS RT-AX88U is a wireless router from Asus China. The ASUS RT-AX88U suffers from a buffer overflow vulnerability that stems from a failure to check the buffer input size, which can be exploited by a remote attacker to send a specially crafted request to a device that contains a specific use...

PT-2023-7549 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U versions 3.0.0.4.388.23110 and prior Description: A stored cross-site scripting XSS issue was discovered within the Custom User Icons functionality. After a remote attacker logs in to the device with regular user privilege, they...

CVE-2023-34358: Out-of-bounds Read

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition...

Moderate Photon OS Security Update - PHSA-2023-3.0-0623

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-3.0-0621

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'openldap' packages of Photon OS have been released...

PT-2023-4045 · Asus · Asus Rt-Ax88U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX88U affected versions not specified Description: The issue is related to an unauthenticated DoS condition in the httpd component of the ASUS RT-AX88U router. A remote attacker can send a specially crafted request containing a specif...