Known Vulnerabilities for Rt-ac1200 by Asus
Listed below are 5 of the newest known vulnerabilities associated with "Rt-ac1200" by "Asus".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-36741 json | U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection. The Network Time Protocol (NTP)... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-36738 json | U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UAR... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-36540 json | Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.cgi endpoint... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-36539 json | Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router configuration... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-36538 json | Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. The password for the... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2023-6437 json | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-Link E... | Not Provided | 2024-03-28 | 2026-05-20 |
| CVE-2021-43702 json | ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the... | 9 - CRITICAL | 2022-07-05 | 2022-07-18 |
| CVE-2018-20335 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the ... | 7.5 - HIGH | 2020-03-20 | 2020-03-24 |
| CVE-2018-20334 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command inje... | 9.8 - CRITICAL | 2020-03-20 | 2020-03-23 |
| CVE-2018-20333 json | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB... | 7.5 - HIGH | 2020-03-20 | 2020-03-23 |