Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

TI-2013-02703 CVE-2013-3093 · GHSA-8cpg-m77x-38cp

ASUS RT-N56U devices allow CSRF.

Priority LOW 39

ASUS RT-N56U devices allow CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00739 Published 2020-01-28 No fix listed CWE-352
Priority MEDIUM 59

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16707 Published 2019-11-21 No fix listed CWE-787
Priority MEDIUM 49

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC5…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04191 Published 2018-04-20 No fix listed CWE-20
Priority MEDIUM 48

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC32…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03557 Published 2018-04-04 No fix listed CWE-78
Priority LOW 30

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and passwo…

CVSS 2.0MEDIUM 6.3 Network Low privileges Interaction — EPSS 0.01126 Published 2014-04-21 No fix listed CWE-200
Priority MEDIUM 53

Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07824 Published 2014-01-22 No fix listed CWE-119