Priority MEDIUM 51
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZA…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06491 · Published 2021-11-19 · No fix listed CWE-307
Priority MEDIUM 49
In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.16191 · Published 2021-04-12 · No fix listed CWE-834
Priority MEDIUM 47
ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt ser…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02763 · Published 2022-04-22 · Fixed in 3.0.0.4.386.4606 CWE-134
Priority MEDIUM 42
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00863 · Published 2023-09-18 · Fixed in 3.0.0.4_388_23748 CWE-134
Priority MEDIUM 42
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-07-31 · No fix listed CWE-125
Priority MEDIUM 41
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00976 · Published 2022-07-05 · No fix listed CWE-79
Priority MEDIUM 41
An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDI…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04952 · Published 2021-11-19 · No fix listed CWE-444
Priority MEDIUM 40
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00815 · Published 2023-07-31 · No fix listed CWE-125
Priority LOW 36
A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.
CVSS 3.1HIGH 8.2· Network · Low privileges · User interaction · EPSS 0.00465 · Published 2023-07-31 · No fix listed CWE-79
Priority LOW 31
An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0112 · Published 2022-09-26 · No fix listed CWE-74
Priority LOW 25
ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00594 · Published 2022-04-22 · Fixed in 3.0.0.4.386.4606 CWE-79