Browse CVEs

HIGH 8.8 CVE-2025-15101 An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to exe… Asus Firmware after 3.0.0.6_102 Fix from $1,9502026-03-26 HIGH 7.8 CVE-2025-12793 An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from … Myasus 4.0.52.0 / 4.2.50.0+ Fix from $1,9502026-01-06 CRITICAL 9.8 CVE-2025-59374 KEV "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a sup… Live Update 3.6.8+ Fix from $2,3002025-12-17 CRITICAL 9.8 CVE-2025-59367 An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into… Dsl Ac51 Firmware 1.1.2.3_1010+ Fix from $2,3002025-11-13 HIGH 7.2 CVE-2024-31161 The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this… Download Master 3.1.0.114+ Fix from $1,9502024-06-14 HIGH 8.8 CVE-2024-33220 An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrar… Ai Suite No fix yet Fix from $1,9502024-05-22 HIGH 7.8 CVE-2024-33219 An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute … Sabertooth X99 Firmware No fix yet Fix from $1,9502024-05-22 MEDIUM 6.5 CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disc… Rt Ax92u Firmware Mitigation only Fix from $1,6002024-05-03 HIGH 7.5 CVE-2024-26342 A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet. 4g Ac68u Firmware No fix yet Fix from $1,9502024-02-28 CRITICAL 9.8 CVE-2023-5716 ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HT… Armoury Crate 4.1.0.8+ Fix from $2,3002024-01-19 CRITICAL 9.1 CVE-2023-47678 An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by… Rt Ac87u Firmware Mitigation only Fix from $2,3002023-11-15 HIGH 8.8 CVE-2023-41345 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module.… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41346 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. A… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41347 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An … Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41348 ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication mod… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-11-03 HIGH 8.8 CVE-2023-41349 ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remo… Rt Ax88u Firmware 3.0.0.4.388.23748+ Fix from $1,9502023-09-18 HIGH 8.8 CVE-2023-39780 KEVEPSS 34% On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist paramete… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-11 HIGH 7.2 CVE-2023-39238 It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within it… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.2 CVE-2023-39239 It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a s… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.2 CVE-2023-39240 It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation fo… Rt Ax55 Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38032 ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38033 ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-39236 ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege ca… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-39237 ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privileg… Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 8.8 CVE-2023-38031 ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can … Rt Ac86u Firmware Mitigation only Fix from $1,9502023-09-07 HIGH 7.5 CVE-2023-39086 ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext. Rt Ac66u B1 Firmware Mitigation only Fix from $1,9502023-08-08 MEDIUM 5.4 CVE-2023-34360 A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.… Rt Ax88u Firmware after 3.0.0.4.388.23110 Fix from $1,6002023-07-31 HIGH 7.5 CVE-2023-34358 ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contai… Rt Ax88u Firmware 3.0.0.4.388.23748+ Fix from $1,9502023-07-31 HIGH 7.5 CVE-2023-34359 ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which caus… Rt Ax88u Firmware 3.0.0.4.388.23748+ Fix from $1,9502023-07-31 HIGH 7.8 CVE-2023-26911 ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch pro… Armoury Crate after 5.3.4.0 Fix from $1,9502023-07-26