Asus

Hg100 Firmware

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-15910

Exploit
  • EPSS 0.44%
  • Published 20.12.2019 17:15:11
  • Last modified 21.11.2024 04:29:42

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.

9.8

CVE-2019-15911

Exploit
  • EPSS 0.67%
  • Published 20.12.2019 17:15:11
  • Last modified 21.11.2024 04:29:42

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service...

7.5

CVE-2019-15912

Exploit
  • EPSS 0.43%
  • Published 20.12.2019 17:15:11
  • Last modified 21.11.2024 04:29:42

An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

7.8

CVE-2019-11060

  • EPSS 1.34%
  • Published 29.08.2019 01:15:10
  • Last modified 21.11.2024 04:20:27

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associ...

8.1

CVE-2019-11061

Exploit
  • EPSS 9.21%
  • Published 29.08.2019 01:15:10
  • Last modified 21.11.2024 04:20:27

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. C...

7.8

CVE-2018-11492

Exploit
  • EPSS 11.38%
  • Published 10.08.2018 16:29:00
  • Last modified 21.11.2024 03:43:28

ASUS HG100 devices allow denial of service via an IPv4 packet flood.

10

CVE-2018-11491

Exploit
  • EPSS 5.58%
  • Published 25.07.2018 13:29:00
  • Last modified 21.11.2024 03:43:28

ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.