Asus Asuswrt
10 CVEs affecting Asus Asuswrt. Latest disclosed: 2022-08-05. Critical: 5, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26376 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7… |
CVE-2018-20334 | Critical | 9.8 | 2020-03-20 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacte… |
CVE-2018-6000 | Critical | 9.8 | 2018-01-22 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for s… |
CVE-2018-5999 | Critical | 9.8 | 2018-01-22 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even… |
CVE-2017-15655 | Critical | 9.6 | 2018-01-31 | Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but thi… |
CVE-2017-15656 | High | 8.8 | 2018-01-31 | Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt. |
CVE-2017-15653 | High | 8.8 | 2018-01-31 | Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized u… |
CVE-2017-15654 | High | 8.3 | 2018-01-31 | Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access. |
CVE-2018-20335 | High | 7.5 | 2020-03-20 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI. |
CVE-2018-20333 | High | 7.5 | 2020-03-20 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router… |