Known Vulnerabilities for products from ASUS

Listed below are 20 of the newest known vulnerabilities associated with the vendor "ASUS".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by ASUS can be found at device.report : ASUS

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2023-41349 ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN functi... 8.8 - HIGH 2023-09-18 2023-09-18
CVE-2023-39780 ASUS RT-AX55 v3.0.0.4.386.51598 was discovered to contain an authenticated command injection vulnerability. 8.8 - HIGH 2023-09-11 2023-09-11
CVE-2023-39240 It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caus... 9.8 - CRITICAL 2023-09-07 2023-09-07
CVE-2023-39239 It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by... 9.8 - CRITICAL 2023-09-07 2023-09-07
CVE-2023-39238 It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a... 9.8 - CRITICAL 2023-09-07 2023-09-07
CVE-2023-39237 ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker w... 8.8 - HIGH 2023-09-07 2023-09-07
CVE-2023-39236 ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with ... 8.8 - HIGH 2023-09-07 2023-09-07
CVE-2023-39086 ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext. 7.5 - HIGH 2023-08-08 2023-08-08
CVE-2023-38033 ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote at... 8.8 - HIGH 2023-09-07 2023-09-07
CVE-2023-38032 ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker wit... 8.8 - HIGH 2023-09-07 2023-09-07
CVE-2022-23973 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.8 - HIGH 2022-04-07 2022-04-14
CVE-2022-23972 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.8 - HIGH 2022-04-07 2022-04-14
CVE-2022-23971 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.1 - HIGH 2022-04-07 2022-04-14
CVE-2022-23970 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 8.1 - HIGH 2022-04-07 2022-04-14
CVE-2022-22814 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-03-10 2023-08-08
CVE-2022-22262 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.7 - HIGH 2022-03-01 2022-03-08
CVE-2022-22054 ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characte... 6.5 - MEDIUM 2022-01-14 2022-01-21
CVE-2022-21933 ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use s... 7.8 - HIGH 2022-01-21 2023-07-24
CVE-2021-43702 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9 - CRITICAL 2022-07-05 2022-07-18
CVE-2021-42055 ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically prox... 6.8 - MEDIUM 2021-10-18 2021-10-22
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from ASUS

Type Vendor Product Version
Operating
System		AsusAsus Firmware3.0.0.4.382.50470
Operating
System		AsusAsuswrt3.0.0.4.378
Operating
System		AsusAsuswrt-merlin3.0.0.4.384.20308
ApplicationAsusAtk Package-
ApplicationAsusAura Sync-
ApplicationAsusDevice Activation1.0.7.0
HardwareAsusDsl-n10s-
Operating
System		AsusDsl-n12e C1 Firmware1.1.2.3_345
Operating
System		AsusDsl-n17u Firmware1.1.0.2
HardwareAsusDsl-n55u-
Operating
System		AsusDsl-n55u Firmware3.0.0.4.374_1397
Operating
System		AsusDsl-n56u Firmware1.0.0.9
HardwareAsusGt-ac2900-
Operating
System		AsusGt-ac5300 Firmware3.0.0.4.384.21140
HardwareAsusGt-ax11000-
Operating
System		AsusHg100 Firmware-
ApplicationAsusIpswcom Activex Component1.0.0.1
ApplicationAsusNet4switch1.0.0020
HardwareAsusPegasus 4 Max-
Operating
System		AsusPegasus 4 Max Firmware-
Results limited to 20 most recent known configurations

Popular searches for "ASUS"

ASUS USA

www.asus.com

ASUS USA ASUS Cs, servers, wireless solutions, mobile phones and networking devices. ASUS H F D ranks among BusinessWeeks InfoTech 100 for 12 consecutive years.

www.asus.com/us www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory www.asus.com/ROG-Intelligent-Cooling www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory www.asus.com/Pages/Investor techinstyle.asus.com/hub/notebook-pc www.asus.com/us/investor.aspx www.asus.com/us/Business www.asus.com/us/Networking/Bluetooth-Antennas-Products Asus Laptop Server (computing) Video game Desktop computer Motherboard Personal computer Mobile phone Networking hardware Netbook Bloomberg Businessweek Wi-Fi Video card Computer monitor Information technology Wireless Intel Zenbook Asus Vivo Chrome OS

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].