Vulnerability index

Browse CVEs

223 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Hg100 Firmware HIGH 8.1
CVE-2019-11061

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devic…

Fix: 4.00.09+
Fix from $1,950 2019-08-29
Hg100 Firmware HIGH 7.5
CVE-2019-11060

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause …

Fix: after 1.05.12
Fix from $1,950 2019-08-29
Hivivo CRITICAL 9.1
CVE-2017-17945

The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.

Fix: 1.1.09 / 5.6.27+
Fix from $2,300 2019-06-24
Hivivo CRITICAL 9.1
CVE-2017-17944

The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.

Fix: 1.1.09 / 5.6.27+
Fix from $2,300 2019-06-20
Rt Ac3200 Firmware CRITICAL 9.8
CVE-2018-14714EPSS 27%

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" …

No fix yet
Fix from $2,300 2019-05-13
Rt Ac3200 Firmware HIGH 8.1
CVE-2018-14713

Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU r…

No fix yet
Fix from $1,950 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.5
CVE-2018-14711

Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing acti…

No fix yet
Fix from $1,600 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.5
CVE-2018-14712

Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.

No fix yet
Fix from $1,600 2019-05-13
Rt Ac3200 Firmware MEDIUM 6.1
CVE-2018-14710EPSS 5%

Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.

No fix yet
Fix from $1,600 2019-05-13
Zenfone V Live Firmware HIGH 7.8
CVE-2018-14993

The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZW_ASUS_A009/ASUS_A009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-ke…

Mitigation only
Fix from $1,950 2019-04-25
Zenfone 3 Max Firmware HIGH 7.1
CVE-2018-14980

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…

Mitigation only
Fix from $1,950 2019-04-25
Zenfone 3 Max Firmware MEDIUM 5.5
CVE-2018-14992

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…

No fix yet
Fix from $1,600 2018-12-28
Aura Sync Firmware HIGH 7.8
CVE-2018-18535

The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This c…

No fix yet
Fix from $1,950 2018-12-26
Aura Sync Firmware HIGH 7.8
CVE-2018-18536

The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could …

No fix yet
Fix from $1,950 2018-12-26
Aura Sync Firmware MEDIUM 5.5
CVE-2018-18537

The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.

No fix yet
Fix from $1,600 2018-12-26
Rt Ac58u Firmware MEDIUM 6.1
CVE-2018-18291

A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML v…

No fix yet
Fix from $1,600 2018-10-14
Rt Ac58u Firmware MEDIUM 5.3
CVE-2018-18287

On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source …

No fix yet
Fix from $1,600 2018-10-14
Gt Ac5300 Firmware HIGH 7.5
CVE-2018-17127

blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereferen…

Fix: after 3.0.0.4.384.32738
Fix from $1,950 2018-09-17
Gt Ac5300 Firmware HIGH 8.8
CVE-2018-17023

Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack t…

Fix: after 3.0.0.4.384_32738
Fix from $1,950 2018-09-13
Gt Ac5300 Firmware HIGH 7.5
CVE-2018-17020

ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" …

Fix: after 3.0.0.4.384_32738
Fix from $1,950 2018-09-13
Gt Ac5300 Firmware HIGH 7.2
CVE-2018-17022

Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (device crash…

Fix: after 3.0.0.4.384_32738
Fix from $1,950 2018-09-13
Gt Ac5300 Firmware MEDIUM 6.1
CVE-2018-17021

Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrar…

Fix: after 3.0.0.4.384_32738
Fix from $1,600 2018-09-13
Wl 330nul Firmware HIGH 8.8
CVE-2018-0647

Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication …

Fix: 3.0.0.46+
Fix from $1,950 2018-09-07
Dsl N12e C1 Firmware HIGH 8.8
CVE-2018-15887

Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execu…

No fix yet
Fix from $1,950 2018-08-27
Hg100 Firmware HIGH 7.5
CVE-2018-11492EPSS 11%

ASUS HG100 devices allow denial of service via an IPv4 packet flood.

No fix yet
Fix from $1,950 2018-08-10
Hg100 Firmware CRITICAL 9.8
CVE-2018-11491EPSS 7%

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.

Fix: 1.05.12+
Fix from $2,300 2018-07-25
Rp Ac52 Firmware CRITICAL 9.8
CVE-2016-6558

A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface…

Fix: after 1.0.1.1s
Fix from $2,300 2018-07-13
Rp Ac52 Firmware HIGH 8.8
CVE-2016-6557

In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify …

Fix: after 1.0.1.1s
Fix from $1,950 2018-07-13
Rt Ac1200hp Firmware MEDIUM 6.1
CVE-2018-0583

Cross-site scripting vulnerability in ASUS RT-AC1200HP Firmware version prior to 3.0.0.4.380.4180 allows remote attackers to inject arbitrary web scr…

Fix: 3.0.0.4.380.4180+
Fix from $1,600 2018-05-14
Rt Ac87u Firmware MEDIUM 6.1
CVE-2018-0581

Cross-site scripting vulnerability in ASUS RT-AC87U Firmware version prior to 3.0.0.4.378.9383 allows remote attackers to inject arbitrary web script…

Fix: 3.0.0.4.378.9383+
Fix from $1,600 2018-05-14