Known Vulnerabilities for Asuswrt by Asus
Listed below are 10 of the newest known vulnerabilities associated with "Asuswrt" by "Asus".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-26376 json | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswr... | 9.8 - CRITICAL | 2022-08-05 | 2022-12-02 |
| CVE-2018-20335 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the ... | 7.5 - HIGH | 2020-03-20 | 2020-03-24 |
| CVE-2018-20334 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command inje... | 9.8 - CRITICAL | 2020-03-20 | 2020-03-23 |
| CVE-2018-20333 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB... | 7.5 - HIGH | 2020-03-20 | 2020-03-23 |
| CVE-2018-6000 json | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnuploa... | 9.8 - CRITICAL | 2018-01-22 | 2019-10-03 |
| CVE-2018-5999 json | An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processi... | 9.8 - CRITICAL | 2018-01-22 | 2019-10-03 |
| CVE-2017-15656 json | Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt. | 8.8 - HIGH | 2018-01-31 | 2019-10-03 |
| CVE-2017-15655 json | Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fix... | 9.6 - CRITICAL | 2018-01-31 | 2018-02-21 |
| CVE-2017-15654 json | Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gai... | 8.3 - HIGH | 2018-01-31 | 2019-10-03 |
| CVE-2017-15653 json | Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asu... | 8.8 - HIGH | 2018-01-31 | 2018-02-27 |