Asus Sårbarheter

Tidslinje

Typ

Produkt

ASUS BMC35
Asus RT-AC320010
Asus RT-AX56U9
Asus RT-N56U8
Asus RT-AC68U7

Åtgärd

Official Fix54
Temporary Fix0
Workaround7
Unavailable5
Not Defined155

Utnyttjbarhet

High6
Functional1
Proof-of-Concept14
Unproven3
Not Defined197

Åtkomstvektor

Not Defined0
Physical2
Local41
Adjacent27
Network151

Autentisering

Not Defined0
High37
Low75
None109

Användarinteraktion

Not Defined0
Required30
None191

C3BM Index

CVSSv3 Base

≤10
≤20
≤334
≤45
≤516
≤641
≤764
≤832
≤920
≤109

CVSSv3 Temp

≤10
≤20
≤334
≤45
≤523
≤639
≤766
≤827
≤918
≤109

VulDB

≤10
≤20
≤334
≤412
≤529
≤670
≤730
≤829
≤98
≤109

NVD

≤10
≤20
≤30
≤41
≤53
≤611
≤721
≤851
≤914
≤1016

CNA

≤10
≤20
≤30
≤41
≤50
≤61
≤75
≤86
≤98
≤102

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k37
<2k112
<5k72
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k196
<2k19
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (157): A002 (1), A002_2 (1), ADM (1), ASUS DSL-AC51 (1), ASUS WL-330gE (1), ASUS WL-500W (2), ASUS ZenWiFi AX (2), ASUS ZenWiFi XD6 (2), ATK (1), AsusWRT (7), Asuswrt-Merlin (2), Aura Sync (5), BMC (35), CMAX6000 (1), Control Center (2), DSL-AC51 (1), DSL-AC52U (2), DSL-AC55U (2), DSL-AC56U (2), DSL-AC750 (2), DSL-N10S (3), DSL-N10_C1 (2), DSL-N12E C1 (2), DSL-N12E_C1 (1), DSL-N12U C1 (2), DSL-N14U (2), DSL-N14U-B1 (5), DSL-N16 (2), DSL-N16U (2), DSL-N17U (3), DSL-N55U C1 (2), DSL-N55U D1 (2), DSL-N66U (2), Device Activation (1), GPUTweak II (2), GT-AC2900 (1), GT-AC5300 (5), GT-AX11000 (2), HG100 (7), IoT Control Center (1), Ipswcom Activex Component (1), Mini PC (1), MyASUS (1), NAS-M25 (1), P453UJ (1), Precision TouchPad (1), ROG Armoury Crate Lite (1), ROG Zephyrus M GM501GS (1), RP-AC52 (2), RT (1), RT-A88U (1), RT-AC (4), RT-AC51U (5), RT-AC52U (4), RT-AC52U B1 (1), RT-AC52U_B1 (1), RT-AC53 (7), RT-AC55U (5), RT-AC55UHP (1), RT-AC56S (2), RT-AC56U (5), RT-AC58U (7), RT-AC66U (7), RT-AC66U_B1 (4), RT-AC68P (3), RT-AC68U (7), RT-AC86U (4), RT-AC87U (4), RT-AC88U (5), RT-AC88U Download Master (2), RT-AC1200 (5), RT-AC1200HP (1), RT-AC1750 (1), RT-AC1900 (1), RT-AC1900P (2), RT-AC2900 (2), RT-AC3100 (5), RT-AC3200 (10), RT-AC5300 (2), RT-ACRH13 (1), RT-AX55 (2), RT-AX56U (9), RT-AX56U_V2 (2), RT-AX58U (2), RT-AX82U (5), RT-AX82U GUNDAM EDITION (2), RT-AX86S (1), RT-AX86S) (1), RT-AX86U (3), RT-AX86U ZAKU II EDITION (2), RT-AX88U (6), RT-AX92U (2), RT-AX3000 (4), RT-G32 (2), RT-N (4), RT-N10 (3), RT-N10+ (1), RT-N10E (4), RT-N10LX (3), RT-N10U (3), RT-N12 D1 (1), RT-N12+ (4), RT-N12D1 (4), RT-N12E (1), RT-N12HP (4), RT-N12HP_B1 (4), RT-N14UHP (1), RT-N16 (4), RT-N18U (4), RT-N53 (2), RT-N56U (8), RT-N66U (6), RT-N66U Router (1), RT-N300 (4), RT-N600 (1), RT Router (2), RT_AC1200G (4), RT_AC1200GU (4), RT_N12+_PRO (4), Remote Console (1), Router (4), Rt-n56u (2), ScreenPad2_Upgrade_Tool.msi (1), SmartLogon (1), System Control Interface (2), TM-AC1900 Router (1), TS-101 (3), TUF-AX5400 (2), TUF Gaming AX3000 (2), UX360CA BIOS (1), Video Security Online (2), VivoMini (1), Vivobaby App (1), WL-330NUL (5), WL520g (1), WRT (1), WRT-AC66U 3 RT (1), WS-101 (3), WebStorage (1), X00K_1 (2), X00LD_3 (1), X015_1 (2), ZenFone 3 (1), ZenFone 3 Laser (1), ZenFone 3 Max (4), ZenFone 3 Ultra (2), ZenFone 3s Max (2), ZenFone 4 (1), ZenFone 4 Selfie (3), ZenFone 5 Lite (1), ZenFone 5 Selfie (1), ZenFone 5Q (3), ZenFone AR (1), ZenFone Live (1), ZenFone Max 4 (2), ZenWiFi AX (1), Zenfone V Live (1)

Link to Vendor Website: https://www.asus.com/

PubliceradBaseTempSårbarhetProdUtnRemCTIEPSSCVE
11/01/20237.57.3Asus RT-AX82U Network cm_processConnDiagPktList informationsgivningOkändNot DefinedNot Defined0.000.00885CVE-2022-38393
11/01/20238.58.4Asus RT-AX82U HTTP Request get_IFTTTTtoken.cgi Remote Code ExecutionOkändNot DefinedNot Defined0.060.00885CVE-2022-35401
11/01/20236.46.3Asus RT-AX82U Network Packet cm_processREQ_NC minneskorruptionOkändNot DefinedNot Defined0.000.00885CVE-2022-38105
15/12/20225.65.6Asus Aura Sync IOCTL MsIo64.sys minneskorruptionOkändNot DefinedNot Defined0.040.00890CVE-2022-44898
01/12/20229.89.8Asus NAS-M25 Cookie privilegier eskaleringOkändNot DefinedNot Defined0.000.02055CVE-2022-4221
19/10/20226.96.8Asus RT-N12E system.asp svag autentiseringOkändNot DefinedNot Defined0.010.00954CVE-2020-23648
18/10/20225.15.0Asus System Control Interface AsusSoftwareManager.exe privilegier eskaleringOkändNot DefinedOfficial Fix0.080.01404CVE-2022-36439
18/10/20227.06.9ASUS System Control Interface AsusSwitch.exe privilegier eskaleringOkändNot DefinedOfficial Fix0.100.00885CVE-2022-36438
06/10/20227.57.5Asus RT-AX56U strcat minneskorruptionOkändNot DefinedNot Defined0.000.00885CVE-2021-40556
27/09/20226.46.2Asus RT-AX88U HTTP Response Remote Code ExecutionOkändNot DefinedOfficial Fix0.040.05246CVE-2021-41437
06/08/20227.37.3Asus ADM WebDAV minneskorruptionOkändNot DefinedNot Defined0.000.00885CVE-2022-37398
22/07/20225.55.4Asus IoT Control Center Web-based Management Interface cross site scriptingOkändNot DefinedOfficial Fix0.050.01055CVE-2022-20916
05/07/20224.34.3Asus RT-A88U Admin Panel cross site scriptingOkändNot DefinedNot Defined0.000.00885CVE-2021-43702
01/07/20224.44.4Asus DSL-N14U-B1 list Parameter cross site scriptingOkändNot DefinedNot Defined0.040.02561CVE-2022-32988
20/06/20227.57.4Asus Control Center sql injektionOkändNot DefinedNot Defined0.050.01055CVE-2022-26669
20/06/20227.37.0Asus Control Center API privilegier eskaleringOkändNot DefinedOfficial Fix0.040.01055CVE-2022-26668
18/06/20225.55.3Asus RT-N53 apply.cgi privilegier eskaleringOkändNot DefinedNot Defined0.060.02055CVE-2022-31874
11/05/20227.57.0Asus DSL-N14U-B1 TCP SYN förnekande av tjänstenOkändNot DefinedWorkaround0.000.01055CVE-2021-3254
22/04/20224.44.4Asus RT-AX88U HTTP Header cross site scriptingOkändNot DefinedNot Defined0.020.01055CVE-2022-26673
22/04/20227.37.1Asus WebStorage API svag autentiseringAndroid App SoftwareNot DefinedOfficial Fix0.060.01055CVE-2022-26672
22/04/20229.89.8Asus RT-AX88U Format StringOkändNot DefinedNot Defined0.000.01156CVE-2022-26674
08/04/20228.88.6Asus RT-AC86U LPD Service privilegier eskaleringOkändNot DefinedNot Defined0.070.01005CVE-2022-25597
08/04/20227.27.1Asus RT-AX56U URL Parameter update_json kataloggenomgångOkändNot DefinedNot Defined0.040.00885CVE-2022-23970
08/04/20228.88.6Asus RT-AX56U Profile Configuration minneskorruptionOkändNot DefinedNot Defined0.020.01036CVE-2022-23973
08/04/20226.56.4Asus RT-AC86U Request förnekande av tjänstenOkändNot DefinedNot Defined0.040.00885CVE-2022-25595

196 fler poster visas inte

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!