CVE-2021-37317

< 3.0.0.4.386.41634

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote at

9.1CRITICAL

CVE-2021-37316

< 3.0.0.4.386.41634

SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attacker

7.5HIGH

CVE-2021-37315

< 3.0.0.4.386.41634

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows re

9.1CRITICAL

CVE-2021-43702

all versions

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI

9.0CRITICAL

CVE-2021-45757

<= 3.0.0.4.385.20852

ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS).

7.5HIGH

CVE-2021-45756

< 3.0.0.4.385.20633

Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi.

9.8CRITICAL

CVE-2021-3128

< 3.0.0.4.386.42095

In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, wh

7.5HIGH

CVE-2018-18320

<= 380.70

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands b

9.8CRITICAL

CVE-2018-18319

<= 380.70

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands b

9.8CRITICAL

CVE-2018-0582

< 3.0.0.4.380.1031

Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject a

6.1MEDIUM

CVE-2018-9285

< 3.0.0.4.384.10007

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 device

9.8CRITICAL

CVE-2017-11420

<= 3.0.0.4.380.7743

Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for AS

9.8CRITICAL

CVE-2017-11345

<= 3.0.0.4.380.7743

Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P,

7.8HIGH

CVE-2017-11344

<= 3.0.0.4.380.7743

Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P,

7.8HIGH

CVE-2014-7270

<= 3.0.0.4.376.3715

Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68

CVE-2014-7269

<= 3.0.0.4.376.3715

ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlie

CVE-2014-2925

<= 3.0.0.4.374_4983

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmwa

CVE-2014-2719

all versions

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is

CVE-2013-5948

all versions

The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4