Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV
TI-2025-36933 ASUS Live Update Embedded Malicious Code Vulnerability Priority CRITICAL 99KEV 2025-12-17TI-2021-12008 ASUS Routers Improper Authentication Vulnerability Priority CRITICAL 100KEV 2025-06-02TI-2023-20780 ASUS RT-AX55 Routers OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-06-02

Components

Products in the NVD configurations · select one to filter the records
Asmb8-ikvm Firmware 19 records HIGH Rt-ac86u Firmware 19 records MEDIUM Z10pe-d16 Ws Firmware 18 records LOW Z10pr-d16 Firmware 18 records LOW Asmb9-ikvm Firmware 17 records LOW E700 G4 Firmware 17 records LOW Esc4000 Dhd G4 Firmware 17 records LOW Esc4000 G4 Firmware 17 records LOW

Records

14 records in Rt-ac68u Firmware · all components

TI-2021-15305 CVE-2021-37317 · GHSA-53c9-q26h-r9v2

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version…

Priority HIGH 80

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE o…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01536 Published 2023-02-03 No fix listed CWE-22
TI-2021-15303 CVE-2021-37315 · GHSA-2gmp-hjmm-v2wx

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware…

Priority HIGH 80

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01113 Published 2023-02-03 No fix listed CWE-706
TI-2013-05070 CVE-2013-5948 · GHSA-v58v-p24g-62g2

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT…

Priority MEDIUM 49

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metach…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.09445 Published 2014-04-21 No fix listed CWE-78
TI-2018-06731 CVE-2018-9285 · GHSA-8g7r-fwgg-5qfg

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U…

Priority MEDIUM 48

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC32…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03557 Published 2018-04-04 No fix listed CWE-78
TI-2014-06054 CVE-2014-7269 · GHSA-cqq8-x3rc-74x7

ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers…

Priority LOW 33

ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers with firmw…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01911 Published 2015-02-01 No fix listed CWE-78
TI-2014-06055 CVE-2014-7270 · GHSA-hhfv-v628-qxv3

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2015-02-01 No fix listed CWE-352
TI-2014-02176 CVE-2014-2719 · GHSA-rx4g-9g3h-5mmf

Advanced_System_Content.asp in the ASUS RT series routers with firmware before…

Priority LOW 30

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and passwo…

CVSS 2.0MEDIUM 6.3 Network Low privileges Interaction — EPSS 0.01126 Published 2014-04-21 No fix listed CWE-200
TI-2018-00539 CVE-2018-0582 · GHSA-29qh-xc29-vp82

Cross-site scripting in ASUS RT-AC68U

Priority LOW 29

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2018-05-14 No fix listed CWE-79
TI-2014-02346 CVE-2014-2925 · GHSA-x5cm-jpm5-r4pf

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01201 Published 2014-04-21 No fix listed CWE-79
Open these records in search →