CVE-2013-5948

CVE-2013-5948 documents concrete details: Affected devices are ASUS RT-AC68U and other RT-series routers with firmware before 3.0.0.4.374.5047. The issue resides in the Network Analysis tab (Main_Analysis_Content.asp), where remote authenticated users can cause arbitrary commands to run via shell...

CVE-2014-7269

The CVE-2014-7269 entry concerns ASUS JAPAN RT--series wireless routers (RT-AC87U, RT-AC68U, RT-AC56S, RT-N66U, RT-N56U) with firmware versions including 3.0.0.4.378.3754 and earlier (AC87U), and 3.0.0.4.376.3715 and earlier (other models). The vulnerability allows remote authenticated users to e...

CVE-2014-7270

CVE-2014-7270 is a CSRF vulnerability affecting ASUS JAPAN RT-series routers (RT-AC87U, RT-AC68U, RT-AC56S, RT-N66U, RT-N56U). The issue is triggered via malicious pages while users are authenticated, allowing attackers to hijack user sessions and perform unintended actions. Root cause involves c...

CVE-2014-2719

The CVE affects ASUS RT series routers with firmware prior to 3.0.0.4.374.5517. The vulnerability arises in Advanced_System_Content.asp: when an administrator session is active, remote authenticated users can read the page source to obtain the administrator username and password. Impact is creden...

CVE-2014-2925

CVE-2014-2925 is an XSS vulnerability in ASUS RT-AC68U and other RT-series routers, exploitable via the current_page parameter to apply.cgi in Advanced_Wireless_Content.asp on firmware prior to 3.0.0.4.374.5047. Affected devices accept remote script/HTML injection without authentication, with pot...