Read the docs

ASUS

Records366All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical60CVSS 9.0–10.0
CVSS high174CVSS 7.0–8.9

Exploited now

ASUS records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Rt-ax88u Firmware · all components

Priority MEDIUM 51

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06491 Published 2021-11-19 No fix listed CWE-307
TI-2022-09945 CVE-2022-26674 · GHSA-c8vq-g263-292w

ASUS RT-AX88U - Format String

Priority MEDIUM 47

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt ser…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02763 Published 2022-04-22 Fixed in 3.0.0.4.386.4606 CWE-134
Priority MEDIUM 42

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00863 Published 2023-09-18 Fixed in 3.0.0.4_388_23748 CWE-134
TI-2023-17191 CVE-2023-34359 · GHSA-7wmc-hpgc-h32q

ASUS RT-AX88U - Out-of-bounds Read - 2

Priority MEDIUM 42

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-07-31 No fix listed CWE-125
Priority MEDIUM 41

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDI…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04952 Published 2021-11-19 No fix listed CWE-444
TI-2023-17190 CVE-2023-34358 · GHSA-prxc-69qm-664p

ASUS RT-AX88U - Out-of-bounds Read - 1

Priority MEDIUM 40

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-07-31 No fix listed CWE-125
TI-2023-17192 CVE-2023-34360 · GHSA-28cg-8hgj-ww5p

ASUS RT-AX88U - Stored XSS

Priority LOW 36

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00465 Published 2023-07-31 No fix listed CWE-79
Priority LOW 31

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0112 Published 2022-09-26 No fix listed CWE-74
TI-2022-09944 CVE-2022-26673 · GHSA-v4mg-xr34-jc9w

ASUS RT-AX88U - Stored XSS

Priority LOW 25

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00594 Published 2022-04-22 Fixed in 3.0.0.4.386.4606 CWE-79
Open these records in search →