Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV
TI-2025-36933 ASUS Live Update Embedded Malicious Code Vulnerability Priority CRITICAL 99KEV 2025-12-17TI-2021-12008 ASUS Routers Improper Authentication Vulnerability Priority CRITICAL 100KEV 2025-06-02TI-2023-20780 ASUS RT-AX55 Routers OS Command Injection Vulnerability Priority CRITICAL 97KEV 2025-06-02

Components

Products in the NVD configurations · select one to filter the records
Asmb8-ikvm Firmware 19 records HIGH Rt-ac86u Firmware 19 records MEDIUM Z10pe-d16 Ws Firmware 18 records LOW Z10pr-d16 Firmware 18 records LOW Asmb9-ikvm Firmware 17 records LOW E700 G4 Firmware 17 records LOW Esc4000 Dhd G4 Firmware 17 records LOW Esc4000 G4 Firmware 17 records LOW

Records

8 records in Rt-ax82u Firmware · all components

TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787
TI-2022-17813 CVE-2022-38105 · GHSA-8h8q-pcwj-rx99

Memory corruption in ASUS RT-AX82U

Priority HIGH 72

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01083 Published 2023-01-10 No fix listed CWE-119
TI-2022-15978 CVE-2022-35401 · GHSA-rj78-2fm5-wrfp

Improper authentication in ASUS RT-AX82U

Priority HIGH 70

An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.20849 Published 2023-01-10 No fix listed CWE-324
TI-2022-18019 CVE-2022-38393 · GHSA-hv5w-v9vx-jh7r

Out-of-bounds read in ASUS RT-AX82U

Priority MEDIUM 51

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18847 Published 2023-01-10 No fix listed CWE-125
TI-2021-18228 CVE-2021-41435 · GHSA-hjq5-v65p-2p24

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000…

Priority MEDIUM 51

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06491 Published 2021-11-19 No fix listed CWE-307
TI-2021-18229 CVE-2021-41436 · GHSA-j65p-j8h7-7chg

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000…

Priority MEDIUM 41

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDI…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04952 Published 2021-11-19 No fix listed CWE-444
Open these records in search →