Known Vulnerabilities for Asuswrt by Asus
Listed below are 9 of the newest known vulnerabilities associated with "Asuswrt" by "Asus".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-20335 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the ... | 7.5 - HIGH | 2020-03-20 | 2020-03-24 |
| CVE-2018-20334 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command inje... | 9.8 - CRITICAL | 2020-03-20 | 2020-03-23 |
| CVE-2018-20333 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB... | 7.5 - HIGH | 2020-03-20 | 2020-03-23 |
| CVE-2018-6000 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnuploa... | 9.8 - CRITICAL | 2018-01-22 | 2019-10-03 |
| CVE-2018-5999 | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processi... | 9.8 - CRITICAL | 2018-01-22 | 2019-10-03 |
| CVE-2017-15656 | Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt. | 8.8 - HIGH | 2018-01-31 | 2019-10-03 |
| CVE-2017-15655 | Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fix... | 9.6 - CRITICAL | 2018-01-31 | 2018-02-21 |
| CVE-2017-15654 | Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gai... | 8.3 - HIGH | 2018-01-31 | 2019-10-03 |
| CVE-2017-15653 | Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asu... | 8.8 - HIGH | 2018-01-31 | 2018-02-27 |