CVE-2018-14710: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter...

PT-2019-9049 · Asus · Asus Rt-Ac3200

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC3200 version 3.0.0.4.382.50010 Description: The issue allows attackers to execute system commands via the "load script" URL parameter in the appGet.cgi file. This can be exploited by sending a malicious request to the "/appGet.cgi"...

CVE-2018-14713: Use of Externally-Controlled Format String

Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter...

CVE-2018-14714: Undefined Security Weakness

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "loadscript" URL parameter...

ASUS GT-AC5300 Cross-Site Scripting Vulnerability

The ASUS GT-AC5300 is a wireless router from ASUS. A cross-site scripting vulnerability exists in the ASUS GT-AC5300 using firmware version 3.0.0.4.38432738 and earlier. A remote attacker can exploit the vulnerability by sending a 'hook' parameter to the appGet.cgi file to inject arbitrary web...

Cross site scripting

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

Stack overflow

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...

CVE-2018-17021: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.38432738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter...

CVE-2018-17022: Out-of-bounds Write

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.38432738 allows remote attackers to cause a denial of service device crash or possibly have unspecified other impact by setting a long shpath0 value and then sending an appGet.cgi?hook=selectlist"StoragexSharedPath" request,...