63 matches found
Null pointer dereference
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
CVE-2018-17127
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
CVE-2018-17127
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
CVE-2018-17127
The vulnerability CVE-2018-17127 affects ASUS GT-AC5300 routers (blocking_request.cgi) up to version 3.0.0.4.384_32738. The root cause is a NULL pointer dereference triggered by a request missing the timestap parameter, leading to remote denial of service and device reboot/crash. Affected version...
ASUS GT-AC5300 Denial of Service Vulnerability (CNVD-2018-19561)
The ASUS GT-AC5300 is a wireless router from ASUS. A security vulnerability exists in the blockingrequest.cgi file in the ASUS GT-AC5300 3.0.0.4.38432738 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference and device crash...
CVE-2018-17127: NULL Pointer Dereference
blockingrequest.cgi on ASUS GT-AC5300 devices through 3.0.0.4.38432738 allows remote attackers to cause a denial of service NULL pointer dereference and device crash via a request that lacks a timestap parameter...
PT-2018-13908
Name of the Vulnerable Software and Affected Versions ASUS GT-AC5300 devices version 3.0.0.4.384 32738 Description The issue allows remote attackers to cause a denial of service, resulting in a device crash due to a NULL pointer dereference. This can be achieved by sending a request that lacks a...
ASUS GT-AC5300 Denial of Service Vulnerability
The ASUS GT-AC5300 is a wireless router from ASUS. A security vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. An attacker can exploit the vulnerability by sending 'GET / HTTP/1.1\r\n' to cause a denial of service...
ASUS GT-AC5300 Cross-Site Request Forgery Vulnerability
The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site request forgery vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a request to the startapply.htm page to change the administrat...
ASUS GT-AC5300 Buffer Overflow Vulnerability
The ASUS GT-AC5300 is a wireless router from ASUS. A buffer overflow vulnerability exists in ASUS GT-AC5300 3.0.0.4.38432738 and prior versions. An attacker can exploit this vulnerability to cause a denial of service device crash by setting a long shpath0 value and sending a request to...
ASUS GT-AC5300 Cross-Site Scripting Vulnerability
The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site scripting vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a 'hook' parameter to the appGet.cgi file to inject arbitrary web...
Cross site scripting
Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...
Stack overflow
Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
CVE-2018-17020
ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...
CVE-2018-17023
Cross-site request forgery CSRF vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.38432738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to startapply.htm...
CVE-2018-17021
Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...
Code injection
ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...
CVE-2018-17020
ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line...
CVE-2018-17021
Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...