Vulnerability index

Browse CVEs

132 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Zenfone 4 Selfie Firmware MEDIUM 5.5
CVE-2019-15392

The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-ke…

Mitigation only
Fix from $1,600 2019-11-14
Rt Ac66u Firmware CRITICAL 9.8
CVE-2013-4656

Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.

Mitigation only
Fix from $2,300 2019-11-13
Rog Zephyrus M Gm501gs Firmware MEDIUM 6.8
CVE-2019-18216

The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which …

Mitigation only
Fix from $1,600 2019-10-20
Asuswrt Merlin HIGH 7.5
CVE-2018-20336

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a l…

No fix yet
Fix from $1,950 2019-09-17
Precision Touchpad CRITICAL 9.8
CVE-2019-10709EPSS 12%

AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potent…

No fix yet
Fix from $2,300 2019-09-04
Rt Ac3200 Firmware CRITICAL 9.8
CVE-2018-14714EPSS 27%

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" …

No fix yet
Fix from $2,300 2019-05-13
Rt Ac3200 Firmware HIGH 8.1
CVE-2018-14713

Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU r…

No fix yet
Fix from $1,950 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.5
CVE-2018-14711

Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing acti…

No fix yet
Fix from $1,600 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.5
CVE-2018-14712

Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.

No fix yet
Fix from $1,600 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.1
CVE-2018-14710EPSS 5%

Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.

No fix yet
Fix from $1,600 2019-05-13
Zenfone V Live Firmware HIGH 7.8
CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZW_ASUS_A009/ASUS_A009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-ke…

Mitigation only
Fix from $1,950 2019-04-25
Zenfone 3 Max Firmware HIGH 7.1
CVE-2018-14980

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…

Mitigation only
Fix from $1,950 2019-04-25
Zenfone 3 Max Firmware MEDIUM 5.5
CVE-2018-14992

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…

No fix yet
Fix from $1,600 2018-12-28
Aura Sync Firmware HIGH 7.8
CVE-2018-18535

The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This c…

No fix yet
Fix from $1,950 2018-12-26
Aura Sync Firmware HIGH 7.8
CVE-2018-18536

The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could …

No fix yet
Fix from $1,950 2018-12-26
Aura Sync Firmware MEDIUM 5.5
CVE-2018-18537

The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.

No fix yet
Fix from $1,600 2018-12-26
Rt Ac58u Firmware MEDIUM 6.1
CVE-2018-18291

A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML v…

No fix yet
Fix from $1,600 2018-10-14
Rt Ac58u Firmware MEDIUM 5.3
CVE-2018-18287

On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source …

No fix yet
Fix from $1,600 2018-10-14
Dsl N12e C1 Firmware HIGH 8.8
CVE-2018-15887

Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execu…

No fix yet
Fix from $1,950 2018-08-27
Hg100 Firmware HIGH 7.5
CVE-2018-11492EPSS 11%

ASUS HG100 devices allow denial of service via an IPv4 packet flood.

No fix yet
Fix from $1,950 2018-08-10
Rt Ac51u Firmware CRITICAL 9.8
CVE-2018-8826

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N…

Mitigation only
Fix from $2,300 2018-04-20
Dsl N10s Firmware HIGH 8.8
CVE-2017-12592

ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability. A normal user can escalate its privilege and perform administrative act…

No fix yet
Fix from $1,950 2017-08-18
Dsl N10s Firmware HIGH 8.8
CVE-2017-12593

ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.

No fix yet
Fix from $1,950 2017-08-18
Dsl N10s Firmware MEDIUM 5.4
CVE-2017-12591

ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter.

No fix yet
Fix from $1,600 2017-08-18
Rt Ac1750 Firmware MEDIUM 6.5
CVE-2017-8877

ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID.

Mitigation only
Fix from $1,600 2017-05-10
Rt Ac1750 Firmware MEDIUM 6.5
CVE-2017-8878

ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-Fi password via WPS_info.xml.

Mitigation only
Fix from $1,600 2017-05-10
Rt Ac66u Firmware CRITICAL 9.8
CVE-2013-4659EPSS 14%

Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on rout…

No fix yet
Fix from $2,300 2017-03-14
Rt Ac53 Firmware CRITICAL 9.8
CVE-2017-6548EPSS 21%

Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-A…

No fix yet
Fix from $2,300 2017-03-09
Rt Ac53 Firmware HIGH 8.8
CVE-2017-6549EPSS 8%

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87…

No fix yet
Fix from $1,950 2017-03-09
Rt Ac53 Firmware MEDIUM 6.1
CVE-2017-6547

Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC…

No fix yet
Fix from $1,600 2017-03-09