Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV
TI-2025-36933 ASUS Live Update Embedded Malicious Code Vulnerability Priority CRITICAL 99KEV 2025-12-17TI-2021-12008 ASUS Routers Improper Authentication Vulnerability Priority CRITICAL 100KEV 2025-06-02TI-2023-20780 ASUS RT-AX55 Routers OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-06-02

Components

Products in the NVD configurations · select one to filter the records
Asmb8-ikvm Firmware 19 records HIGH Rt-ac86u Firmware 19 records MEDIUM Z10pe-d16 Ws Firmware 18 records LOW Z10pr-d16 Firmware 18 records LOW Asmb9-ikvm Firmware 17 records LOW E700 G4 Firmware 17 records LOW Esc4000 Dhd G4 Firmware 17 records LOW Esc4000 G4 Firmware 17 records LOW

Records

11 records in Rt-ac66u Firmware · all components

TI-2018-06421 CVE-2018-8879 · GHSA-8c78-mq7w-pq49

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4…

Priority MEDIUM 59

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16707 Published 2019-11-21 No fix listed CWE-787
TI-2013-05311 CVE-2013-6343 · GHSA-3hpf-fhp5-r44c

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with…

Priority MEDIUM 53

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07824 Published 2014-01-22 No fix listed CWE-119
TI-2018-06370 CVE-2018-8826 · GHSA-87g7-g8rw-gjv7

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with…

Priority MEDIUM 49

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC5…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04191 Published 2018-04-20 No fix listed CWE-20
TI-2018-06731 CVE-2018-9285 · GHSA-8g7r-fwgg-5qfg

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U…

Priority MEDIUM 48

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC32…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03557 Published 2018-04-04 No fix listed CWE-78
TI-2013-02703 CVE-2013-3093 · GHSA-8cpg-m77x-38cp

ASUS RT-N56U devices allow CSRF.

Priority LOW 39

ASUS RT-N56U devices allow CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00739 Published 2020-01-28 No fix listed CWE-352
TI-2014-02176 CVE-2014-2719 · GHSA-rx4g-9g3h-5mmf

Advanced_System_Content.asp in the ASUS RT series routers with firmware before…

Priority LOW 30

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and passwo…

CVSS 2.0MEDIUM 6.3 Network Low privileges Interaction — EPSS 0.01126 Published 2014-04-21 No fix listed CWE-200
Open these records in search →