TI-2023-17556 CVE-2023-35086 · GHSA-r4fx-9v33-wcf4
ASUS RT-AX56U V2 & RT-AC86U - Format String -1
Priority MEDIUM 61
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U.
ASUS
Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9
Exploited now
ASUS records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
19 records in Rt-ac86u Firmware · all components
TI-2023-17557 CVE-2023-35087 · GHSA-4qh3-vw22-fpq6
ASUS RT-AX56U V2 & RT-AC86U - Format String - 2
Priority MEDIUM 51
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U.
TI-2021-02220 CVE-2021-3128 · GHSA-289v-jmv7-6xmx
In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware <…
Priority MEDIUM 49
In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between…
TI-2018-06370 CVE-2018-8826 · GHSA-87g7-g8rw-gjv7
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with…
Priority MEDIUM 49
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC5…
TI-2018-06731 CVE-2018-9285 · GHSA-8g7r-fwgg-5qfg
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U…
Priority MEDIUM 48
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC32…
TI-2023-20391 CVE-2023-39237 · GHSA-cjvw-w4hq-pxwm
ASUS RT-AC86U - Command injection vulnerability - 5
Priority MEDIUM 43
ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character.
TI-2023-20390 CVE-2023-39236 · GHSA-8p65-c26h-6p78
ASUS RT-AC86U - Command injection vulnerability - 4
Priority MEDIUM 43
ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character.
TI-2023-19458 CVE-2023-38033 · GHSA-277x-g4g7-hg6j
ASUS RT-AC86U - Command injection vulnerability - 3
Priority MEDIUM 43
ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character.
TI-2023-19457 CVE-2023-38032 · GHSA-34hp-m978-mc59
ASUS RT-AC86U - Command injection vulnerability - 2
Priority MEDIUM 43
ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character.
TI-2023-19456 CVE-2023-38031 · GHSA-p872-99gj-2vw3
ASUS RT-AC86U - Command injection vulnerability - 1
Priority MEDIUM 43
ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character.
TI-2023-13219 CVE-2023-28702 · GHSA-gm84-29g6-fp4h
ASUS RT-AC86U - Command Injection
Priority MEDIUM 43
ASUS RT-AC86U does not filter special characters for parameters in specific web URLs.
TI-2021-19533 CVE-2021-43702 · GHSA-vf6p-785f-8qgq
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).
Priority MEDIUM 41
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).
TI-2022-09187 CVE-2022-25597 · GHSA-xvrf-q22w-5f48
ASUS RT-AC86U - Command Injection
Priority LOW 39
ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt…
TI-2022-09186 CVE-2022-25596 · GHSA-39fr-rq99-f592
ASUS RT-AC86U - Heap-based buffer overflow
Priority LOW 39
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary…
TI-2023-20394 CVE-2023-39240 · GHSA-pjc4-2x49-3j92
ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
Priority LOW 36
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API.
TI-2023-20393 CVE-2023-39239 · GHSA-3vqq-6vgg-h45h
ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
Priority LOW 36
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API.
TI-2023-20392 CVE-2023-39238 · GHSA-r2q6-vc3h-88w5
ASUS RT-AX55、RT-AX56U_V2 - Format String - 1
Priority LOW 36
It is identified a format string vulnerability in ASUS RT-AX56U V2.
TI-2023-13220 CVE-2023-28703 · GHSA-2pwg-h86c-qrp2
ASUS RT-AC86U - Buffer Overflow
Priority LOW 35
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length.
TI-2022-09185 CVE-2022-25595 · GHSA-wmmv-6988-fqcv
ASUS RT-AC86U - Improper Input Validation
Priority LOW 29
ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a server-to-client reply attempt.