CVE-2021-45757

ASUS AC68U =3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service DoS...

CVE-2021-45757

ASUS AC68U =3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service DoS...

Buffer overflow

ASUS AC68U =3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service DoS...

CVE-2021-45757

The vulnerability CVE-2021-45757 affects ASUS AC68U routers (3.0.0.4.385.20852 and earlier). The root cause is a buffer overflow in blocking.cgi, leading to denial of service. Affected component is blocking.cgi in the router’s firmware; the issue arises from improper input/data handling. Reported...

CVE-2021-45756

Summary: The CVE-2021-45756 issue affects ASUS RT-AC68U (versions prior to 3.0.0.4.385.20633) and RT-AC5300 (prior to 3.0.0.4.384.82072). A buffer overflow in blocking_request.cgi (an in-memory operation) can lead to arbitrary command execution. The vulnerability is confirmed by multiple sources ...

PT-2022-12388

Name of the Vulnerable Software and Affected Versions Asus RT-AC68U versions prior to 3.0.0.4.385.20633 Asus RT-AC5300 versions prior to 3.0.0.4.384.82072 Description A buffer overflow issue exists in the blocking request.cgi endpoint. Recommendations For Asus RT-AC68U versions prior to...

PT-2022-12389

Name of the Vulnerable Software and Affected Versions ASUS AC68U versions 3.0.0.4.385.20852 and earlier Description The issue is related to a buffer overflow in the blocking.cgi component, which may cause a denial of service DoS. Recommendations For versions 3.0.0.4.385.20852 and earlier, conside...

ASUS RT-AC68U和ASUS RT-AC5300 安全漏洞

The ASUS RT-AC68U and ASUS RT-AC5300 are both routers from the Chinese company ASUS. A command injection vulnerability exists in the Asus RT-AC68U prior to version 3.0.0.4.385.20633 and RT-AC5300 prior to version 3.0.0.4.384.82072, which stems from a failure to properly validate data boundaries...

VulnCheck KEV: CVE-2013-5948

The Network Analysis tab MainAnalysisContent.asp in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field destIP parameter...

VulnCheck KEV: CVE-2017-6549

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware...

ASUS RT-AC68U Cross-Site Scripting Vulnerability (CNVD-2018-09580)

ASUS RT-AC68U is an enterprise-class wireless router product from ASUS. A cross-site scripting vulnerability exists in the ASUS RT-AC68U using firmware versions prior to 3.0.0.4.378.9383. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...

CVE-2018-0582

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0582

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0582

The CVE-2018-0582 issue concerns the ASUS RT-AC68U router. Connected sources confirm a cross-site scripting vulnerability in firmware versions prior to 3.0.0.4.380.1031, affecting the router’s web UI and enabling an attacker to inject arbitrary script or HTML via unspecified vectors. The root cau...

CVE-2018-0582

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

AsusWRT LAN Unauthenticated Remote Code Execution Exploit

The HTTP server in AsusWRT has a flaw where it allows an unauthenticated client to perform a POST in certain cases. This can be combined with another vulnerability in the VPN configuration upload routine that sets NVRAM configuration variables directly from the POST request to enable a special...

AsusWRT LAN Unauthenticated Remote Code Execution

The HTTP server in AsusWRT has a flaw where it allows an unauthenticated client to perform a POST in certain cases. This can be combined with another vulnerability in the VPN configuration upload routine that sets NVRAM configuration variables directly from the POST request to enable a special...

Asus_DeleteOfflineClientOverflow

Vulnerability: Stack buffer overflow in httpd ------------------------------------------ Exploitation: Can control the $pc. Use together with a session hijack vulnerability or in a csrf attack, can remote code execution and then get a connectback shell. ------------------------------------------...

CVE-2017-11345

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RTAC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66UB1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RTAC1200GU,...