Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Priority MEDIUM 42

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00863 Published 2023-09-18 Fixed in 3.0.0.4_388_23748 CWE-134
TI-2023-17192 CVE-2023-34360 · GHSA-28cg-8hgj-ww5p

ASUS RT-AX88U - Stored XSS

Priority LOW 36

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00465 Published 2023-07-31 No fix listed CWE-79
TI-2023-17191 CVE-2023-34359 · GHSA-7wmc-hpgc-h32q

ASUS RT-AX88U - Out-of-bounds Read - 2

Priority MEDIUM 42

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-07-31 No fix listed CWE-125
TI-2023-17190 CVE-2023-34358 · GHSA-prxc-69qm-664p

ASUS RT-AX88U - Out-of-bounds Read - 1

Priority MEDIUM 40

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2023-07-31 No fix listed CWE-125
Priority LOW 31

An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0112 Published 2022-09-26 No fix listed CWE-74
TI-2022-09945 CVE-2022-26674 · GHSA-c8vq-g263-292w

ASUS RT-AX88U - Format String

Priority MEDIUM 47

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt ser…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02763 Published 2022-04-22 Fixed in 3.0.0.4.386.4606 CWE-134
TI-2022-09944 CVE-2022-26673 · GHSA-v4mg-xr34-jc9w

ASUS RT-AX88U - Stored XSS

Priority LOW 25

ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00594 Published 2022-04-22 Fixed in 3.0.0.4.386.4606 CWE-79
Priority MEDIUM 51

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZA…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06491 Published 2021-11-19 No fix listed CWE-307
Priority MEDIUM 41

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDI…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04952 Published 2021-11-19 No fix listed CWE-444