CVE-2023-39780

CVE-2023-39780 affects ASUS RT‑AX55 devices (firmware 3.0.0.4.386.51598) where an authenticated attacker can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. The CVSSv3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Require...

CVE-2023-39240 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its setiperf3cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remo...

CVE-2023-39238 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution,...

PT-2023-4837 · Asus · Asus Rt-Ac86U +2

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX55 versions affected versions not specified ASUS RT-AX56U V2 versions affected versions not specified ASUS RT-AC86U versions affected versions not specified Description: The issue is related to a format string vulnerability in the...

CVE-2021-41435

CVE-2021-41435 affects a broad set of ASUS router models and TUF/ZenWiFi devices. The flaw is a brute-force protection bypass in the CAPTCHA protection that allows a remote attacker to perform an arbitrary number of login attempts by sending a specific HTTP request. Affected versions are before 3...