Asus Vulnerabilidades

Curso de tempo

Tipo

Produto

ASUS BMC35
Asus RT-AC320010
Asus RT-AX56U9
Asus RT-N56U8
Asus RT-AC68U7

Medidas

Official Fix57
Temporary Fix0
Workaround7
Unavailable5
Not Defined158

Explorabilidade

High6
Functional1
Proof-of-Concept15
Unproven3
Not Defined202

Tipo de acesso

Not Defined0
Physical2
Local42
Adjacent27
Network156

Autenticação

Not Defined0
High37
Low81
None109

Actividade do utilizador

Not Defined0
Required31
None196

C3BM Index

CVSSv3 Base

≤10
≤20
≤334
≤46
≤516
≤641
≤766
≤835
≤920
≤109

CVSSv3 Temp

≤10
≤20
≤334
≤46
≤523
≤640
≤767
≤829
≤919
≤109

VulDB

≤10
≤20
≤334
≤413
≤529
≤671
≤734
≤829
≤98
≤109

NVD

≤10
≤20
≤30
≤41
≤53
≤611
≤721
≤854
≤914
≤1019

CNA

≤10
≤20
≤30
≤41
≤50
≤61
≤75
≤86
≤98
≤102

Fabricante

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explorar 0 dia

<1k37
<2k121
<5k69
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar hoje

<1k206
<2k15
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (160): A002 (1), A002_2 (1), AC68U (2), ADM (1), ASMB8 iKVM (1), ASUS DSL-AC51 (1), ASUS WL-330gE (1), ASUS WL-500W (2), ASUS ZenWiFi AX (2), ASUS ZenWiFi XD6 (2), ATK (1), AsusWRT (7), Asuswrt-Merlin (2), Aura Sync (5), BMC (35), CMAX6000 (1), Control Center (2), DSL-AC51 (1), DSL-AC52U (2), DSL-AC55U (2), DSL-AC56U (2), DSL-AC750 (2), DSL-N10S (3), DSL-N10_C1 (2), DSL-N12E C1 (2), DSL-N12E_C1 (1), DSL-N12U C1 (2), DSL-N14U (2), DSL-N14U-B1 (5), DSL-N16 (2), DSL-N16U (2), DSL-N17U (3), DSL-N55U C1 (2), DSL-N55U D1 (2), DSL-N66U (2), Device Activation (1), EC Tool Driver (1), GPUTweak II (2), GT-AC2900 (1), GT-AC5300 (5), GT-AX11000 (2), HG100 (7), IoT Control Center (1), Ipswcom Activex Component (1), Mini PC (1), MyASUS (1), NAS-M25 (1), P453UJ (1), Precision TouchPad (1), ROG Armoury Crate Lite (1), ROG Zephyrus M GM501GS (1), RP-AC52 (2), RT (1), RT-A88U (1), RT-AC (4), RT-AC51U (6), RT-AC52U (4), RT-AC52U B1 (1), RT-AC52U_B1 (1), RT-AC53 (7), RT-AC55U (5), RT-AC55UHP (1), RT-AC56S (2), RT-AC56U (5), RT-AC58U (7), RT-AC66U (7), RT-AC66U_B1 (4), RT-AC68P (3), RT-AC68U (8), RT-AC86U (4), RT-AC87U (4), RT-AC88U (5), RT-AC88U Download Master (2), RT-AC1200 (5), RT-AC1200HP (1), RT-AC1750 (1), RT-AC1900 (1), RT-AC1900P (2), RT-AC2900 (2), RT-AC3100 (5), RT-AC3200 (10), RT-AC5300 (2), RT-ACRH13 (1), RT-AX55 (2), RT-AX56U (9), RT-AX56U_V2 (2), RT-AX58U (2), RT-AX82U (5), RT-AX82U GUNDAM EDITION (2), RT-AX86S (1), RT-AX86S) (1), RT-AX86U (3), RT-AX86U ZAKU II EDITION (2), RT-AX88U (6), RT-AX92U (2), RT-AX3000 (4), RT-G32 (2), RT-N (4), RT-N10 (3), RT-N10+ (1), RT-N10E (4), RT-N10LX (3), RT-N10U (3), RT-N12 D1 (1), RT-N12+ (4), RT-N12D1 (4), RT-N12E (1), RT-N12HP (4), RT-N12HP_B1 (4), RT-N14UHP (1), RT-N16 (4), RT-N18U (4), RT-N53 (2), RT-N56U (8), RT-N66U (6), RT-N66U Router (1), RT-N300 (4), RT-N600 (1), RT Router (2), RT_AC1200G (4), RT_AC1200GU (4), RT_N12+_PRO (4), Remote Console (1), Router (4), Rt-n56u (2), ScreenPad2_Upgrade_Tool.msi (1), SmartLogon (1), System Control Interface (2), TM-AC1900 Router (1), TS-101 (3), TUF-AX5400 (2), TUF Gaming AX3000 (2), UX360CA BIOS (1), Video Security Online (2), VivoMini (1), Vivobaby App (1), WL-330NUL (5), WL520g (1), WRT (1), WRT-AC66U 3 RT (1), WS-101 (3), WebStorage (1), X00K_1 (2), X00LD_3 (1), X015_1 (2), ZenFone 3 (1), ZenFone 3 Laser (1), ZenFone 3 Max (4), ZenFone 3 Ultra (2), ZenFone 3s Max (2), ZenFone 4 (1), ZenFone 4 Selfie (3), ZenFone 5 Lite (1), ZenFone 5 Selfie (1), ZenFone 5Q (3), ZenFone AR (1), ZenFone Live (1), ZenFone Max 4 (2), ZenWiFi AX (1), Zenfone V Live (1)

Link to Vendor Website: https://www.asus.com/

Publicado emBaseTempVulnerabilidadeProdExpMasCTIEPSSCVE
02/05/20233.53.5ASUS RT-AC51U Network Request Roteiro Cruzado de SítiosDesconhecidoNot DefinedNot Defined0.000.00062CVE-2023-29772
27/02/20238.08.0ASUS ASMB8 iKVM SNMP direitos alargadosDesconhecidoNot DefinedNot Defined0.030.00664CVE-2023-26602
15/02/20236.56.4ASUS EC Tool Driver IOCTL d.sys Local Privilege EscalationHardware Driver SoftwareNot DefinedNot Defined0.030.00042CVE-2022-42455
03/02/20236.36.0ASUS AC68U Cloud Disk Injecção SQLDesconhecidoNot DefinedOfficial Fix0.000.00063CVE-2021-37316
03/02/20237.77.5ASUS AC68U Directório TraversalDesconhecidoNot DefinedOfficial Fix0.040.00105CVE-2021-37317
03/02/20237.77.5ASUS RT-AC68U Cloud Disk direitos alargadosDesconhecidoNot DefinedOfficial Fix0.030.00097CVE-2021-37315
11/01/20237.57.4Asus RT-AX82U Network cm_processConnDiagPktList Divulgação de InformaçãoDesconhecidoNot DefinedNot Defined0.030.00046CVE-2022-38393
11/01/20238.58.4Asus RT-AX82U HTTP Request get_IFTTTTtoken.cgi Remote Code ExecutionDesconhecidoNot DefinedNot Defined0.000.00106CVE-2022-35401
11/01/20236.86.7Asus RT-AX82U Network Packet cm_processREQ_NC Excesso de tampãoDesconhecidoNot DefinedNot Defined0.030.00084CVE-2022-38105
15/12/20225.65.6Asus Aura Sync IOCTL MsIo64.sys Excesso de tampãoDesconhecidoNot DefinedNot Defined0.030.00051CVE-2022-44898
01/12/20229.89.8Asus NAS-M25 Cookie direitos alargadosDesconhecidoNot DefinedNot Defined0.050.21461CVE-2022-4221
19/10/20226.96.8Asus RT-N12E system.asp Fraca autenticaçãoDesconhecidoNot DefinedNot Defined0.060.00055CVE-2020-23648
18/10/20225.15.0Asus System Control Interface AsusSoftwareManager.exe direitos alargadosDesconhecidoNot DefinedOfficial Fix0.020.00042CVE-2022-36439
18/10/20227.06.9ASUS System Control Interface AsusSwitch.exe direitos alargadosDesconhecidoNot DefinedOfficial Fix0.000.00044CVE-2022-36438
06/10/20227.57.5Asus RT-AX56U strcat Excesso de tampãoDesconhecidoNot DefinedNot Defined0.000.00069CVE-2021-40556
27/09/20226.46.2Asus RT-AX88U HTTP Response Remote Code ExecutionDesconhecidoNot DefinedOfficial Fix0.030.00080CVE-2021-41437
06/08/20227.37.3Asus ADM WebDAV Excesso de tampãoDesconhecidoNot DefinedNot Defined0.030.00047CVE-2022-37398
22/07/20225.55.4Asus IoT Control Center Web-based Management Interface Roteiro Cruzado de SítiosDesconhecidoNot DefinedOfficial Fix0.000.00063CVE-2022-20916
05/07/20224.34.3Asus RT-A88U Admin Panel Roteiro Cruzado de SítiosDesconhecidoNot DefinedNot Defined0.000.00050CVE-2021-43702
01/07/20224.44.4Asus DSL-N14U-B1 list Parameter Roteiro Cruzado de SítiosDesconhecidoNot DefinedNot Defined0.080.00063CVE-2022-32988
20/06/20227.57.4Asus Control Center Injecção SQLDesconhecidoNot DefinedNot Defined0.000.00055CVE-2022-26669
20/06/20227.37.0Asus Control Center API direitos alargadosDesconhecidoNot DefinedOfficial Fix0.020.00077CVE-2022-26668
18/06/20225.55.3Asus RT-N53 apply.cgi direitos alargadosDesconhecidoNot DefinedNot Defined0.030.00925CVE-2022-31874
11/05/20227.57.0Asus DSL-N14U-B1 TCP SYN Negação de ServiçoDesconhecidoNot DefinedWorkaround0.000.00118CVE-2021-3254
22/04/20224.44.4Asus RT-AX88U HTTP Header Roteiro Cruzado de SítiosDesconhecidoNot DefinedNot Defined0.030.00061CVE-2022-26673

202 as entradas adicionais não são mais exibidas

Might our Artificial Intelligence support you?

Check our Alexa App!