Vulnerabilities

TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787

TI-2018-14390 CVE-2018-20333 · GHSA-phr3-h5g9-9rcc

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

LOW 35

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01209 Published 2020-03-20 No fix listed CWE-200

TI-2018-14392 CVE-2018-20335 · GHSA-v4p6-cprv-j5cj

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

LOW 36

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01408 Published 2020-03-20 No fix listed CWE-20

TI-2018-14391 CVE-2018-20334 · GHSA-xgrv-mpr3-8pg9

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

MEDIUM 49

An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03773 Published 2020-03-20 No fix listed CWE-78

TI-2017-11447 CVE-2017-15656 · GHSA-j3wh-j44m-36fg

Password are stored in plaintext in nvram in the HTTPd server in all current versions (<=…

MEDIUM 41

Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01475 Published 2018-01-31 No fix listed CWE-522

TI-2017-11446 CVE-2017-15655 · GHSA-w6cp-hqm8-4phj

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt…

MEDIUM 47

Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.0309 Published 2018-01-31 No fix listed CWE-119

TI-2017-11445 CVE-2017-15654 · GHSA-xjwp-6c2p-p5mx

Highly predictable session tokens in the HTTPd server in all current versions (<=…

MEDIUM 40

Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.02128 Published 2018-01-31 No fix listed CWE-330

TI-2017-11444 CVE-2017-15653 · GHSA-qx8p-7xc2-fw37

Improper administrator IP validation after his login in the HTTPd server in all current…

MEDIUM 42

Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing administrator session token…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02003 Published 2018-01-31 No fix listed CWE-613

TI-2018-04368 CVE-2018-6000 · GHSA-92f5-6w73-42pg

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

HIGH 83

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.85161 Published 2018-01-22 No fix listed CWE-862

TI-2018-04367 CVE-2018-5999 · GHSA-8pph-m89g-pffm

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

HIGH 84

An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.87526 Published 2018-01-22 No fix listed

Vulnerabilities

Filters