Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

asus rt-ax88u firmware vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-41349
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in ...
Asus Rt-ax88u Firmware
NA
CVE-2023-34360
A stored cross-site scripting (XSS) issue exists within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cros...
Asus Rt-ax88u Firmware
NA
CVE-2023-34358
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a ...
Asus Rt-ax88u Firmware
NA
CVE-2023-34359
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.
Asus Rt-ax88u Firmware
NA
CVE-2021-41437
An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an malicious user to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.
Asus Rt-ax88u Firmware
3.5
CVSSv2
CVE-2021-43702
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Asus Zenwifi Xd4s Firmware 3.0.0.4.386.46061Asus Zenwifi Xt9 Firmware 3.0.0.4.386.46061Asus Zenwifi Xd5 Firmware 3.0.0.4.386.46061Asus Zenwifi Pro Et12 Firmware 3.0.0.4.386.46061Asus Zenwifi Pro Xt12 Firmware 3.0.0.4.386.46061Asus Zenwifi Ax Hybrid Firmware 3.0.0.4.386.46061Asus Zenwifi Et8 Firmware 3.0.0.4.386.46061Asus Zenwifi Xd6 Firmware 3.0.0.4.386.46061Asus Zenwifi Ac Mini Firmware 3.0.0.4.386.46061Asus Zenwifi Ax Mini Firmware 3.0.0.4.386.46061Asus Zenwifi Ax Firmware 3.0.0.4.386.46061Asus Zenwifi Ac Firmware 3.0.0.4.386.46061Asus Rt-ac66u B1 Firmware 3.0.0.4.386.46061Asus Rt-ax88u Firmware 3.0.0.4.386.46061Asus Rt-ax82u Firmware 3.0.0.4.386.46061Asus Rt-ax89x Firmware 3.0.0.4.386.46061Asus Rt-ax92u Firmware 3.0.0.4.386.46061Asus Rt-ax86u Firmware 3.0.0.4.386.46061Asus Rt-ax68u Firmware 3.0.0.4.386.46061Asus Rt-ax3000 Firmware 3.0.0.4.386.46061Asus Rt-ax58u Firmware 3.0.0.4.386.46061Asus Rt-ax55 Firmware 3.0.0.4.386.46061
7.5
CVSSv2
CVE-2022-26674
ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote malicious user to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Asus Rt-ax88u Firmware
3.5
CVSSv2
CVE-2022-26673
ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform Stored Cross-Site Scripting (XSS) attacks.
Asus Rt-ax88u Firmware
10
CVSSv2
CVE-2021-41435
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Ga...
Asus Gt-ax11000 FirmwareAsus Rt-ax3000 FirmwareAsus Rt-ax55 FirmwareAsus Rt-ax56u FirmwareAsus Rt-ax56u V2 FirmwareAsus Rt-ax58u FirmwareAsus Rt-ax82u FirmwareAsus Rt-ax82u Gundam Edition FirmwareAsus Rt-ax86u FirmwareAsus Rt-ax86s FirmwareAsus Rt-ax86u Zaku Ii Edition FirmwareAsus Rt-ax88u FirmwareAsus Rt-ax92u FirmwareAsus Tuf Gaming Ax3000 FirmwareAsus Tuf-ax5400 FirmwareAsus Zenwifi Xd6 FirmwareAsus Zenwifi Ax (xt8) FirmwareAsus Rt-ax68u Firmware
7.8
CVSSv2
CVE-2021-41436
An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX54...
Asus Gt-ax11000 FirmwareAsus Rt-ax3000 FirmwareAsus Rt-ax55 FirmwareAsus Rt-ax56u FirmwareAsus Rt-ax56u V2 FirmwareAsus Rt-ax58u FirmwareAsus Rt-ax82u FirmwareAsus Rt-ax82u Gundam Edition FirmwareAsus Rt-ax86u FirmwareAsus Rt-ax86s FirmwareAsus Rt-ax86u Zaku Ii Edition FirmwareAsus Rt-ax88u FirmwareAsus Rt-ax92u FirmwareAsus Tuf Gaming Ax3000 FirmwareAsus Tuf-ax5400 FirmwareAsus Zenwifi Xd6 FirmwareAsus Zenwifi Ax (xt8) FirmwareAsus Rt-ax68u Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692CVE-2012-1823memory leakCVE-2024-0627CVE-2024-31402privilege escalationCVE-2024-36418remote code executionCVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook