Skip to content
OpenAdvisories

Vendor

ASUS

190 known vulnerabilities.

Products

Router 25 Armoury Crate 24 BMC firmware for Z10PR-D16 18 BMC firmware for ASMB8-iKVM 18 BMC firmware for Z10PE-D16 WS 18 BMC firmware for ASMB9-iKVM 17 BMC firmware for RS720A-E9-RS24-E 17 BMC firmware for RS700A-E9-RS4 17 BMC firmware for RS700-E9-RS4 17 BMC firmware for ESC4000 G4X 17 BMC firmware for RS700-E9-RS12 17 BMC firmware for RS100-E10-PI2 17 BMC firmware for RS300-E10-PS4 17 BMC firmware for RS300-E10-RS4 17 BMC firmware for RS500A-E9-PS4 17 BMC firmware for RS500A-E9-RS4 17 BMC firmware for E700 G4 17 BMC firmware for WS C422 PRO/SE 17 BMC firmware for WS X299 PRO/SE 17 BMC firmware for Z11PA-U12 17 BMC firmware for Z11PA-U12/10G-2S 17 BMC firmware for KNPA-U16 17 BMC firmware for ESC4000 DHD G4 17 BMC firmware for ESC4000 G4 17 BMC firmware for RS720Q-E9-RS24-S 17 BMC firmware for RS720Q-E9-RS8 17 BMC firmware for RS720Q-E9-RS8-S 17 BMC firmware for Z11PA-D8 17 BMC firmware for Z11PA-D8C 17 BMC firmware for RS720-E9-RS24-U 17 BMC firmware for RS720-E9-RS8-G 17 BMC firmware for RS500-E9-PS4 17 BMC firmware for Pro E800 G4 17 BMC firmware for RS500-E9-RS4 17 BMC firmware for RS500-E9-RS4-U 17 BMC firmware for RS520-E9-RS12-E 17 BMC firmware for RS520-E9-RS8 17 BMC firmware for ESC8000 G4 17 BMC firmware for ESC8000 G4/10G 17 BMC firmware for RS720-E9-RS12-E 17
All Critical High Medium Low Exploited only Public exploit

78 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-88708

    An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a speci…

    ASUS Router firmware
  • Medium 6.9
    CVE-2026-110464

    Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry l…

    ASUS Armoury Crate
  • Medium 6.8
    CVE-2026-88781

    Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an…

    ASUS motherboards firmware
  • Medium 5.3
    CVE-2026-75753

    Missing Authentication for a Critical Function  in certain ASUS routers allows an unauthorized nearby user to send spec…

    ASUS Router
  • Medium 5.3
    CVE-2026-12962

    A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a loca…

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-18023

    Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose…

    ASUS Armoury Crate
  • Medium 5.9
    CVE-2026-16004

    Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary …

    ASUS Armoury Crate
  • Medium 5.8
    CVE-2026-16005

    Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a craf…

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-16006

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user …

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-75808

    Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-ser…

    ASUS Armoury Crate
  • Medium 5.9
    CVE-2026-75809

    Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and …

    ASUS Armoury Crate
  • Medium 5.7
    CVE-2026-75810

    Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassin…

    ASUS Armoury Crate
  • Medium 5.8
    CVE-2026-75811

    Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify ha…

    ASUS Armoury Crate
  • Medium 6.8
    CVE-2026-19398

    An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cau…

    ASUS FA507NU FA507NV
  • Medium 5.6
    CVE-2026-15030

    Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows…

    ASUS System Control Interface System Control Interface v3 Business Manager
  • Medium 5.9
    CVE-2026-11851

    Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of…

    ASUS Router
  • Medium 6.0
    CVE-2026-12960 Public exploit

    An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application …

    ASUS Router app
  • Medium 6.8
    CVE-2026-3508

    An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause …

    ASUS ASUS System Control Interface
  • Medium 5.4
    CVE-2026-3428

    A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a loc…

    ASUS Member Center(华硕大厅)
  • Medium 5.4
    CVE-2026-1880 Public exploit

    An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows priv…

    ASUS DriverHub
  • Medium 6.9
    CVE-2025-15038

    An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can…

    ASUS ASUS Business System Control Interface
  • Medium 5.4
    CVE-2026-1878

    An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows priv…

    ASUS Driver( Headset ) Driver( Keyboard & Mouse )
  • Medium 6.8
    CVE-2025-15037

    An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vuln…

    ASUS ASUS Business System Control Interface
  • Medium 4.8
    CVE-2025-11775

    An out-of-bounds read vulnerability has been identified in the asComSvc service. This vulnerability can be triggered by…

    ASUS Armoury Crate
  • Medium 6.9
    CVE-2025-59372

    A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exp…

    ASUS Router
  • Medium 5.9
    CVE-2025-59369

    A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulner…

    ASUS Router
  • Medium 6.0
    CVE-2025-59368

    An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerabi…

    ASUS Router
  • Medium 6.9
    CVE-2025-59365

    A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigg…

    ASUS Router
  • Medium 6.8
    CVE-2025-9337

    A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a special…

    ASUS Armoury Crate
  • Medium 6.8
    CVE-2025-9336

    A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manip…

    ASUS Armoury Crate
  • Medium 6.7
    CVE-2025-6398

    A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be …

    ASUS AI Suite
  • Medium 6.9
    CVE-2025-4570

    An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token …

    ASUS MyASUS
  • Medium 5.9
    CVE-2025-2027

    A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggere…

    ASUS ASCI
  • Medium 4.8
    CVE-2025-1354

    A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by impr…

    ASUS RT-N10E RT-N12E
  • Medium 5.1
    CVE-2024-55408

    An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality ut…

    ASUS ASCI
  • Medium 4.4
    CVE-2024-11985

    An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2…

    ASUS RT-AX55 RT-AX56U RT-AX56U_V2
  • Medium 4.8
    CVE-2024-31160

    ASUS Download Master - Stored XSS

    The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks.

    ASUS Download Master
  • Medium 4.8
    CVE-2024-31159

    ASUS Download Master - Reflected XSS

    The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks.

    ASUS Download Master
  • Medium 6.5
    CVE-2023-35720

    ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

    ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this v…

    ASUS RT-AX92U
  • Medium 5.9
    CVE-2022-38699

    ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw

    Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing…

    ASUS Armoury Crate Service