ASUS

Records366All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical60CVSS 9.0–10.0

CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV

TI-2025-36933 ASUS Live Update Embedded Malicious Code Vulnerability CRITICAL 99KEV 2025-12-17 TI-2021-12008 ASUS Routers Improper Authentication Vulnerability CRITICAL 100KEV 2025-06-02 TI-2023-20780 ASUS RT-AX55 Routers OS Command Injection Vulnerability CRITICAL 97KEV 2025-06-02

Components

Products in the NVD configurations · select one to filter the records

Asmb8-ikvm Firmware 19 records HIGH Rt-ac86u Firmware 19 records MEDIUM Z10pe-d16 Ws Firmware 18 records LOW Z10pr-d16 Firmware 18 records LOW Asmb9-ikvm Firmware 17 records LOW E700 G4 Firmware 17 records LOW Esc4000 Dhd G4 Firmware 17 records LOW Esc4000 G4 Firmware 17 records LOW

Records

10 records in Asuswrt · all components

TI-2018-04367 CVE-2018-5999 · GHSA-8pph-m89g-pffm

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

HIGH 84

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.87526 Published 2018-01-22 No fix listed

TI-2018-04368 CVE-2018-6000 · GHSA-92f5-6w73-42pg

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

HIGH 83

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.85161 Published 2018-01-22 No fix listed CWE-862

TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787

TI-2018-14391 CVE-2018-20334 · GHSA-xgrv-mpr3-8pg9

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

MEDIUM 49

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03773 Published 2020-03-20 No fix listed CWE-78

TI-2017-11446 CVE-2017-15655 · GHSA-w6cp-hqm8-4phj

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt…

MEDIUM 47

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.0309 Published 2018-01-31 No fix listed CWE-119

TI-2017-11444 CVE-2017-15653 · GHSA-qx8p-7xc2-fw37

Improper administrator IP validation after his login in the HTTPd server in all current…

MEDIUM 42

Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02003 Published 2018-01-31 No fix listed CWE-613

TI-2017-11447 CVE-2017-15656 · GHSA-j3wh-j44m-36fg

Password are stored in plaintext in nvram in the HTTPd server in all current versions (<=…

MEDIUM 41

Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01475 Published 2018-01-31 No fix listed CWE-522

TI-2017-11445 CVE-2017-15654 · GHSA-xjwp-6c2p-p5mx

Highly predictable session tokens in the HTTPd server in all current versions (<=…

MEDIUM 40

Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.02128 Published 2018-01-31 No fix listed CWE-330

TI-2018-14392 CVE-2018-20335 · GHSA-v4p6-cprv-j5cj

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

LOW 36

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01408 Published 2020-03-20 No fix listed CWE-20

TI-2018-14390 CVE-2018-20333 · GHSA-phr3-h5g9-9rcc

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

LOW 35

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01209 Published 2020-03-20 No fix listed CWE-200

Open these records in search →