Browse CVEs

HIGH 8.8 CVE-2024-33220 An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrar… Ai Suite No fix yet Fix from $1,9502024-05-22 HIGH 7.8 CVE-2024-33219 An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute … Sabertooth X99 Firmware No fix yet Fix from $1,9502024-05-22 MEDIUM 6.5 CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disc… Rt Ax92u Firmware Mitigation only Fix from $1,6002024-05-03 HIGH 7.5 CVE-2024-26342 A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet. 4g Ac68u Firmware No fix yet Fix from $1,9502024-02-28 CRITICAL 9.1 CVE-2023-47678 An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by… Rt Ac87u Firmware Mitigation only Fix from $2,3002023-11-15 HIGH 8.8 CVE-2023-41345 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module.… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41346 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. A… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41347 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An … Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41348 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication mod… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-39780 KEVEPSS 34% On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist paramete… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-11 HIGH 7.2 CVE-2023-39238 It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within it… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.2 CVE-2023-39239 It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a s… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.2 CVE-2023-39240 It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation fo… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38032 ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38033 ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-39236 ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege ca… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-39237 ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privileg… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38031 ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.5 CVE-2023-39086 ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext. Rt Ac66u B1 Firmware Mitigation only Fix from $1,9502023-08-08 CRITICAL 9.8 CVE-2023-35087 It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific valu… Rt Ac86u Firmware Mitigation only Fix from $2,3002023-07-21 HIGH 7.2 CVE-2023-35086EPSS 39% It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format strin… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-07-21 HIGH 7.5 CVE-2023-34940 Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only a… Rt N10lx Firmware No fix yet Fix from $1,9502023-06-12 HIGH 7.5 CVE-2023-34942 Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NOTE: This vulnerability only a… Rt N10lx Firmware No fix yet Fix from $1,9502023-06-12 MEDIUM 5.4 CVE-2023-34941EPSS 24% A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitra… Rt N10lx Firmware No fix yet Fix from $1,6002023-06-12 HIGH 8.8 CVE-2023-28702 ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-06-02 HIGH 7.2 CVE-2023-28703 ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-06-02 HIGH 8.1 CVE-2022-35401EPSS 21% An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-craft… Rt Ax82u Firmware No fix yet Fix from $1,9502023-01-10 HIGH 7.5 CVE-2022-38105 An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration serv… Rt Ax82u Firmware No fix yet Fix from $1,9502023-01-10 HIGH 7.5 CVE-2022-38393EPSS 19% A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's conf… Rt Ax82u Firmware No fix yet Fix from $1,9502023-01-10 HIGH 7.5 CVE-2020-23648 Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an attacker can change the admi… Rt N12e Firmware No fix yet Fix from $1,9502022-10-19