Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: ASUS Component: Rt-ax82u Firmware Clear all filters
TI-2022-15978 CVE-2022-35401 · GHSA-rj78-2fm5-wrfp

Improper authentication in ASUS RT-AX82U

Priority HIGH 70

An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.20849 Published 2023-01-10 No fix listed CWE-324
TI-2022-17813 CVE-2022-38105 · GHSA-8h8q-pcwj-rx99

Memory corruption in ASUS RT-AX82U

Priority HIGH 72

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01083 Published 2023-01-10 No fix listed CWE-119
TI-2022-18019 CVE-2022-38393 · GHSA-hv5w-v9vx-jh7r

Out-of-bounds read in ASUS RT-AX82U

Priority MEDIUM 51

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18847 Published 2023-01-10 No fix listed CWE-125
TI-2022-09749 CVE-2022-26376 · GHSA-5v6f-j685-6xv8

Out-of-bounds write in Asuswrt-Merlin New Gen

Priority HIGH 81

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2022-08-05 Fixed in 386.7 CWE-787
TI-2021-18228 CVE-2021-41435 · GHSA-hjq5-v65p-2p24

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000…

Priority MEDIUM 51

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06491 Published 2021-11-19 No fix listed CWE-307
TI-2021-18229 CVE-2021-41436 · GHSA-j65p-j8h7-7chg

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000…

Priority MEDIUM 41

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDI…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04952 Published 2021-11-19 No fix listed CWE-444