Vulnerability index

Browse CVEs

223 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Asus Firmware HIGH 8.8
CVE-2025-15101

An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to exe…

Fix: after 3.0.0.6_102
Fix from $1,950 2026-03-26
Myasus HIGH 7.8
CVE-2025-12793

An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from …

Fix: 4.0.52.0 / 4.2.50.0+
Fix from $1,950 2026-01-06
Live Update CRITICAL 9.8
CVE-2025-59374 KEV

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a sup…

Fix: 3.6.8+
Fix from $2,300 2025-12-17
Dsl Ac51 Firmware CRITICAL 9.8
CVE-2025-59367

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into…

Fix: 1.1.2.3_1010+
Fix from $2,300 2025-11-13
Download Master HIGH 7.2
CVE-2024-31161

The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this…

Fix: 3.1.0.114+
Fix from $1,950 2024-06-14
Ai Suite HIGH 8.8
CVE-2024-33220

An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrar…

No fix yet
Fix from $1,950 2024-05-22
Sabertooth X99 Firmware HIGH 7.8
CVE-2024-33219

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute …

No fix yet
Fix from $1,950 2024-05-22
Rt Ax92u Firmware MEDIUM 6.5
CVE-2023-35720

ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disc…

Mitigation only
Fix from $1,600 2024-05-03
4g Ac68u Firmware HIGH 7.5
CVE-2024-26342

A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet.

No fix yet
Fix from $1,950 2024-02-28
Armoury Crate CRITICAL 9.8
CVE-2023-5716

ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HT…

Fix: 4.1.0.8+
Fix from $2,300 2024-01-19
Rt Ac87u Firmware CRITICAL 9.1
CVE-2023-47678

An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by…

Mitigation only
Fix from $2,300 2023-11-15
Rt Ax55 Firmware HIGH 8.8
CVE-2023-41345

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module.…

Mitigation only
Fix from $1,950 2023-11-03
Rt Ax55 Firmware HIGH 8.8
CVE-2023-41346

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. A…

Mitigation only
Fix from $1,950 2023-11-03
Rt Ax55 Firmware HIGH 8.8
CVE-2023-41347

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An …

Mitigation only
Fix from $1,950 2023-11-03
Rt Ax55 Firmware HIGH 8.8
CVE-2023-41348

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication mod…

Mitigation only
Fix from $1,950 2023-11-03
Rt Ax88u Firmware HIGH 8.8
CVE-2023-41349

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remo…

Fix: 3.0.0.4.388.23748+
Fix from $1,950 2023-09-18
Rt Ax55 Firmware HIGH 8.8
CVE-2023-39780 KEVEPSS 34%

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist paramete…

Mitigation only
Fix from $1,950 2023-09-11
Rt Ax55 Firmware HIGH 7.2
CVE-2023-39238

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within it…

Mitigation only
Fix from $1,950 2023-09-07
Rt Ax55 Firmware HIGH 7.2
CVE-2023-39239

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a s…

Mitigation only
Fix from $1,950 2023-09-07
Rt Ax55 Firmware HIGH 7.2
CVE-2023-39240

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation fo…

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac86u Firmware HIGH 8.8
CVE-2023-38032

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege …

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac86u Firmware HIGH 8.8
CVE-2023-38033

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user …

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac86u Firmware HIGH 8.8
CVE-2023-39236

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege ca…

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac86u Firmware HIGH 8.8
CVE-2023-39237

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privileg…

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac86u Firmware HIGH 8.8
CVE-2023-38031

ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can …

Mitigation only
Fix from $1,950 2023-09-07
Rt Ac66u B1 Firmware HIGH 7.5
CVE-2023-39086

ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.

Mitigation only
Fix from $1,950 2023-08-08
Rt Ax88u Firmware MEDIUM 5.4
CVE-2023-34360

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.…

Fix: after 3.0.0.4.388.23110
Fix from $1,600 2023-07-31
Rt Ax88u Firmware HIGH 7.5
CVE-2023-34358

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contai…

Fix: 3.0.0.4.388.23748+
Fix from $1,950 2023-07-31
Rt Ax88u Firmware HIGH 7.5
CVE-2023-34359

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which caus…

Fix: 3.0.0.4.388.23748+
Fix from $1,950 2023-07-31
Armoury Crate HIGH 7.8
CVE-2023-26911

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch pro…

Fix: after 5.3.4.0
Fix from $1,950 2023-07-26