Asus

Rt-ax82u Firmware

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2022-35401

Exploit
  • EPSS 0.07%
  • Veröffentlicht 10.01.2023 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:11:06

An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to full administrative access to the device. An attacker would need to send ...

7.5

CVE-2022-38105

Exploit
  • EPSS 0.26%
  • Veröffentlicht 10.01.2023 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:15:48

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attack...

7.5

CVE-2022-38393

Exploit
  • EPSS 1.7%
  • Veröffentlicht 10.01.2023 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:16:23

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can ...

9.8

CVE-2022-26376

Exploit
  • EPSS 0.53%
  • Veröffentlicht 05.08.2022 22:15:11
  • Zuletzt bearbeitet 21.11.2024 06:53:52

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a netw...

9

CVE-2021-43702

Exploit
  • EPSS 0.52%
  • Veröffentlicht 05.07.2022 12:15:07
  • Zuletzt bearbeitet 21.11.2024 06:29:39

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stor...

10

CVE-2021-41435

  • EPSS 1.85%
  • Veröffentlicht 19.11.2021 12:15:09
  • Zuletzt bearbeitet 21.11.2024 06:26:14

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX...

7.8

CVE-2021-41436

  • EPSS 4.58%
  • Veröffentlicht 19.11.2021 12:15:09
  • Zuletzt bearbeitet 21.11.2024 06:26:15

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF ...

7.5

CVE-2021-3128

  • EPSS 2.48%
  • Veröffentlicht 12.04.2021 19:15:14
  • Zuletzt bearbeitet 21.11.2024 06:20:56

In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its up...