ASUS vulnerabilities
190 CVEs and advisories name ASUS as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-34360ASUS RT-AX88U - Stored XSS
- CVE-2023-34359ASUS RT-AX88U - Out-of-bounds Read - 2
- CVE-2023-34358ASUS RT-AX88U - Out-of-bounds Read - 1
- CVE-2023-35087ASUS RT-AX56U V2 & RT-AC86U - Format String - 2
- CVE-2023-35086ASUS RT-AX56U V2 & RT-AC86U - Format String -1
- CVE-2023-28703ASUS RT-AC86U - Buffer Overflow
- CVE-2023-28702ASUS RT-AC86U - Command Injection
- CVE-2022-35401An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230.
- CVE-2022-38105An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configura
- CVE-2022-38393A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 rout
- CVE-2022-4221OS command injection in ASUS M25 NAS
- CVE-2022-38699ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw
- CVE-2022-26669ASUS Control Center - SQL Injection
- CVE-2022-26668ASUS Control Center - Broken Access Control
- CVE-2022-26674ASUS RT-AX88U - Format String
- CVE-2022-26673ASUS RT-AX88U - Stored XSS
- CVE-2022-26672ASUS WebStorage - Use of Hard-coded Credentials
- CVE-2022-25597ASUS RT-AC86U - Command Injection
- CVE-2022-25596ASUS RT-AC86U - Heap-based buffer overflow
- CVE-2022-25595ASUS RT-AC86U - Improper Input Validation
- CVE-2022-23973ASUS RT-AX56U - Stack overflew
- CVE-2022-23972ASUS RT-AX56U - SQL Injection
- CVE-2022-23971ASUS RT-AX56U - Path Traversal
- CVE-2022-23970ASUS RT-AX56U - Path Traversal
- CVE-2022-22262ASUS Armoury Crate & Aura Creator Installer之ROG Live Service - Improper Link Resolution Before File Access
- CVE-2022-21933ASUS VivoMini/Mini PC - improper input validation
- CVE-2022-22054ASUS RT-AX56U - Path Traversal
- CVE-2021-44158ASUS RT-AX56U Router - Stack-based buffer overflow
- CVE-2021-41289ASUS P453UJ - Improper Restriction of Operations within the Bounds of a Memory Buffer
- CVE-2021-37910ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication