ASUS vulnerabilities
190 CVEs and advisories name ASUS as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-55408An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver wh
- CVE-2024-13062An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution.
- CVE-2024-12912An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.
- CVE-2024-11985An improper input validation vulnerability leads to device crashes in certain ASUS router models.
- CVE-2024-3912ASUS Router - Upload arbitrary firmware
- CVE-2024-31163ASUS Download Master - Buffer Overflow
- CVE-2024-31162ASUS Download Master - OS Command Injection
- CVE-2024-31161ASUS Download Master - Arbitrary File Upload
- CVE-2024-31160ASUS Download Master - Stored XSS
- CVE-2024-31159ASUS Download Master - Reflected XSS
- CVE-2024-3080ASUS Router - Improper Authentication
- CVE-2024-3079ASUS Router - Stack-based Buffer Overflow
- CVE-2024-0401ASUS OVPN RCE
- CVE-2023-35720ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability
- CVE-2024-1655ASUS WiFi Router - OS Command Injection
- CVE-2023-5716ASUS Armoury Crate - Arbitrary File Write
- CVE-2023-41348ASUS RT-AX55 - command injection - 4
- CVE-2023-41347ASUS RT-AX55 - command injection - 3
- CVE-2023-41346ASUS RT-AX55 - command injection - 2
- CVE-2023-41345ASUS RT-AX55 - command injection - 1
- CVE-2023-41349ASUS RT-AX88U - externally-controlled format string
- CVE-2023-39780On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm…
- CVE-2023-39240ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
- CVE-2023-39239ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
- CVE-2023-39238ASUS RT-AX55、RT-AX56U_V2 - Format String - 1
- CVE-2023-39237ASUS RT-AC86U - Command injection vulnerability - 5
- CVE-2023-39236ASUS RT-AC86U - Command injection vulnerability - 4
- CVE-2023-38033ASUS RT-AC86U - Command injection vulnerability - 3
- CVE-2023-38032ASUS RT-AC86U - Command injection vulnerability - 2
- CVE-2023-38031ASUS RT-AC86U - Command injection vulnerability - 1