Read the docs

Asuswrt-Merlin

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Asuswrt-Merlin records in CISA KEV

No Asuswrt-Merlin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Asuswrt-merlin 4 records MEDIUM New Gen 1 record HIGH

Records

5 records

TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787
TI-2017-09447 CVE-2017-12754 · GHSA-5373-xwjx-wwr9

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier…

Priority MEDIUM 43

Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0271 Published 2017-08-09 No fix listed CWE-119
TI-2018-04129 CVE-2018-5721 · GHSA-8hc5-mr39-qw3v

Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on…

Priority MEDIUM 42

Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS routers (when using software from https://github.com/RMerl/asuswrt-merlin) allows web authenticated attackers to execute code…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01938 Published 2018-01-17 No fix listed CWE-787
Open these records in search →