Asus
Page 2 of 3 — Asus CVEs from a corpus of 206, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28703 | High | 7.2 | 2023-06-02 | ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote… |
CVE-2023-28702 | High | 8.8 | 2023-06-02 | ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerabil… |
CVE-2023-29772 | Medium | 5.2 | 2023-05-02 | A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up… |
CVE-2023-26602 | Critical | 9.8 | 2023-02-26 | ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for N… |
CVE-2022-42455 | High | 7.8 | 2023-02-15 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software pro… |
CVE-2021-37317 | Critical | 9.1 | 2023-02-03 | Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary fi… |
CVE-2021-37316 | High | 7.5 | 2023-02-03 | SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive informati… |
CVE-2021-37315 | Critical | 9.1 | 2023-02-03 | Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbit… |
CVE-2022-38393 | High | 7.5 | 2023-01-10 | A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration… |
CVE-2022-38105 | High | 7.5 | 2023-01-10 | An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A spe… |
CVE-2022-35401 | High | 8.1 | 2023-01-10 | An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP re… |
CVE-2022-44898 | High | 7.8 | 2022-12-14 | The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allow… |
CVE-2022-4221 | Critical | 9.8 | 2022-12-01 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to… |
CVE-2020-23648 | High | 7.5 | 2022-10-19 | Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system.asp / start_apply.htm, an attacker can change the administrator… |
CVE-2022-36439 | Medium | 6.0 | 2022-10-18 | AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and… |
CVE-2022-36438 | High | 7.8 | 2022-10-18 | AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete… |
CVE-2021-40556 | High | 8.8 | 2022-10-06 | A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat functi… |
CVE-2022-38699 | Medium | 5.9 | 2022-09-28 | Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privile… |
CVE-2021-41437 | Medium | 6.5 | 2022-09-26 | An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authentic… |
CVE-2022-26376 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7… |
CVE-2022-35899 | High | 7.8 | 2022-07-21 | There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creatin… |
CVE-2021-43702 | Critical | 9.0 | 2022-07-05 | ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attack… |
CVE-2022-32988 | Medium | 5.4 | 2022-07-01 | Cross Site Scripting (XSS) vulnerability in router Asus DSL-N14U-B1 1.1.2.3_805 via the "*list" parameters (e.g. filter_lwlist, keyword_rulelist, etc) in every… |
CVE-2022-26669 | High | 8.8 | 2022-06-20 | ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API paramet… |
CVE-2022-26668 | High | 7.3 | 2022-06-20 | ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial syst… |
CVE-2022-31874 | Critical | 9.8 | 2022-06-17 | ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface. |
CVE-2021-3254 | High | 7.5 | 2022-05-11 | Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap. |
CVE-2022-26674 | Critical | 9.8 | 2022-04-22 | ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitr… |
CVE-2022-26673 | Medium | 5.4 | 2022-04-22 | ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vu… |
CVE-2022-26672 | High | 7.3 | 2022-04-22 | ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the serve… |
CVE-2022-25597 | High | 8.8 | 2022-04-07 | ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform comm… |
CVE-2022-25596 | High | 8.8 | 2022-04-07 | ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which… |
CVE-2022-25595 | Medium | 6.5 | 2022-04-07 | ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a ser… |
CVE-2022-23973 | High | 8.8 | 2022-04-07 | ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauth… |
CVE-2022-23972 | High | 8.8 | 2022-04-07 | ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject a… |
CVE-2022-23971 | High | 8.1 | 2022-04-07 | ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthent… |
CVE-2022-23970 | High | 8.1 | 2022-04-07 | ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthent… |
CVE-2021-45757 | High | 7.5 | 2022-03-23 | ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS). |
CVE-2021-45756 | Critical | 9.8 | 2022-03-23 | Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi. |
CVE-2022-22814 | Critical | 9.8 | 2022-03-10 | The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation. |
CVE-2022-22262 | High | 7.7 | 2022-03-01 | ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this functi… |
CVE-2021-46247 | High | 7.5 | 2022-02-17 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00. |
CVE-2022-21933 | Medium | 6.7 | 2022-01-21 | ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) t… |
CVE-2022-22054 | Medium | 6.5 | 2022-01-14 | ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows a… |
CVE-2021-46109 | Medium | 6.1 | 2022-01-03 | Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session hijack. |
CVE-2021-44158 | High | 8.0 | 2022-01-03 | ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area netw… |
CVE-2019-20082 | Critical | 9.8 | 2021-12-28 | ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp. |
CVE-2021-41436 | High | 7.5 | 2021-11-19 | An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDI… |
CVE-2021-41435 | Critical | 9.8 | 2021-11-19 | A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U G… |
CVE-2021-41289 | Medium | 6.3 | 2021-11-15 | ASUS P453UJ contains the Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. With a general user’s permission, local attacke… |
CVE-2021-37910 | Low | 3.7 | 2021-11-12 | ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can r… |
CVE-2021-42055 | Medium | 6.8 | 2021-10-18 | ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker. |
CVE-2021-40981 | High | 7.3 | 2021-09-27 | ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the publicly writable %PROGRAMDATA%\ASUS\Gami… |
CVE-2021-32030 | Critical | 9.8 | 2021-05-06 | The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when proce… |
CVE-2021-3128 | High | 7.5 | 2021-04-12 | In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing lo… |
CVE-2021-28686 | Medium | 5.5 | 2021-04-08 | AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-pri… |
CVE-2021-28685 | High | 7.8 | 2021-04-08 | AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by calling one of severa… |
CVE-2021-28209 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administ… |
CVE-2021-28208 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrat… |
CVE-2021-28207 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrato… |
CVE-2021-28206 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administ… |
CVE-2021-28205 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the admi… |
CVE-2021-28204 | High | 7.2 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the… |
CVE-2021-28203 | High | 7.2 | 2021-04-06 | The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission… |
CVE-2021-28202 | Medium | 4.9 | 2021-04-06 | The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28201 | Medium | 4.9 | 2021-04-06 | The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overf… |
CVE-2021-28200 | Medium | 4.9 | 2021-04-06 | The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overfl… |
CVE-2021-28199 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28198 | Medium | 4.9 | 2021-04-06 | The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buff… |
CVE-2021-28197 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28196 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, result… |
CVE-2021-28195 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2021-28194 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28193 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28192 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting… |
CVE-2021-28191 | Medium | 4.9 | 2021-04-06 | The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vuln… |
CVE-2021-28190 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, result… |
CVE-2021-28189 | Medium | 4.9 | 2021-04-06 | The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28188 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resul… |
CVE-2021-28187 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting i… |
CVE-2021-28186 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28185 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resu… |
CVE-2021-28184 | Medium | 4.9 | 2021-04-06 | The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffe… |
CVE-2021-28183 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, result… |
CVE-2021-28182 | Medium | 4.9 | 2021-04-06 | The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer ove… |
CVE-2021-28181 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resul… |
CVE-2021-28180 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resultin… |
CVE-2021-28179 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resu… |
CVE-2021-28178 | Medium | 4.9 | 2021-04-06 | The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28177 | Medium | 4.9 | 2021-04-06 | The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow v… |
CVE-2021-28176 | Medium | 4.9 | 2021-04-06 | The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vu… |
CVE-2021-28175 | Medium | 4.9 | 2021-04-06 | The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow… |
CVE-2021-26943 | High | 8.2 | 2021-03-31 | The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including S… |
CVE-2021-27404 | Medium | 6.1 | 2021-02-19 | Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header. |
CVE-2021-27403 | Medium | 6.1 | 2021-02-19 | Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS. |
CVE-2021-3229 | High | 7.5 | 2021-02-05 | Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup serv… |
CVE-2020-36109 | Critical | 9.8 | 2021-02-01 | ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause cod… |
CVE-2021-3166 | High | 7.5 | 2021-01-18 | An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_… |
CVE-2020-35219 | Critical | 9.8 | 2021-01-04 | The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST r… |
CVE-2020-29656 | High | 7.5 | 2020-12-09 | An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initia… |