ASUS

9 results · Clear filters · Feed

• High 8.7
  CVE-2026-93489 Public exploit

  Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge …

  ASUS Router
  Oct 23, 2026
• High 8.2
  CVE-2026-13585 Public exploit

  Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in…

  ASUS System Control Interface System Control Interface v3 Business Manager
  Jul 15, 2026
• High 8.4
  CVE-2025-3464 Public exploit

  A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issu…

  ASUS Armoury Crate
  Jun 16, 2025
• High 7.2
  CVE-2024-12912 Public exploit

  An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. …

  ASUS Router
  Jan 2, 2025
• High 8.8
  CVE-2024-1655 Public exploit

  ASUS WiFi Router - OS Command Injection

  Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request.

  ASUS ExpertWiFi EBM63 RT-AX57 Go ExpertWiFi EBM68
  Apr 15, 2024
• High 8.8
  CVE-2023-41348 Public exploit

  ASUS RT-AX55 - command injection - 4

  ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to …

  ASUS RT-AX55
  Nov 3, 2023
• High 8.8
  CVE-2023-41346 Public exploit

  ASUS RT-AX55 - command injection - 2

  ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execut…

  ASUS RT-AX55
  Nov 3, 2023
• High 8.8
  CVE-2023-39780 Exploited Public exploit EPSS 40%

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

  ASUS RT-AX55
  Sep 11, 2023

  KEV Jun 2, 2025
• High 7.2
  CVE-2023-35086 Public exploit EPSS 39%

  ASUS RT-AX56U V2 & RT-AC86U - Format String -1

  It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker w…

  ASUS RT-AC86U RT-AX56U_V2
  Jul 21, 2023