Asus Rt-ax88u_firmware
11 CVEs affecting Asus Rt-ax88u_firmware. Latest disclosed: 2023-09-18. Critical: 3, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26674 | Critical | 9.8 | 2022-04-22 | ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitr… |
CVE-2021-41435 | Critical | 9.8 | 2021-11-19 | A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U G… |
CVE-2021-43702 | Critical | 9.0 | 2022-07-05 | ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attack… |
CVE-2023-41349 | High | 8.8 | 2023-09-18 | ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attack… |
CVE-2023-34360 | High | 8.2 | 2023-07-31 | A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.2311… |
CVE-2023-34359 | High | 7.5 | 2023-07-31 | ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the htt… |
CVE-2023-34358 | High | 7.5 | 2023-07-31 | ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a speci… |
CVE-2021-41436 | High | 7.5 | 2021-11-19 | An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDI… |
CVE-2021-3128 | High | 7.5 | 2021-04-12 | In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing lo… |
CVE-2021-41437 | Medium | 6.5 | 2022-09-26 | An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authentic… |
CVE-2022-26673 | Medium | 5.4 | 2022-04-22 | ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vu… |