Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

asuswrt-merlin vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2018-5721
Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS routers (when using software from https://github.com/RMerl/asuswrt-merlin) allows web authenticated malicious users to execute code via a request that updates a setting. In ej_update_var...
Asuswrt-merlin Asuswrt-merlin
8.8
CVSSv3
CVE-2017-12754
Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and previous versions for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-...
Asuswrt-merlin Asuswrt-merlin
5.3
CVSSv3
CVE-2018-8878
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware prior to 3.0.0.4.382.50470 for devices allows remote malicious users to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id...
Asuswrt-merlin Asuswrt-merlinAsus Asus Firmware
5.3
CVSSv3
CVE-2018-8877
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware prior to 3.0.0.4.382.50470 for devices allows remote malicious users to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_...
Asus Asus FirmwareAsuswrt-merlin Asuswrt-merlin
7.5
CVSSv3
CVE-2018-20336
An issue exists in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string over UDP, which may lead to an information leak.
Asus Asuswrt-merlin 3.0.0.4.384.20308
9.8
CVSSv3
CVE-2022-26376
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt before 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen before 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulner...
Asus AsuswrtAsuswrt-merlin New GenAsus Xt8 FirmwareAsus Tuf-ax3000 V2 FirmwareAsus Xd4 FirmwareAsus Et12 FirmwareAsus Gt-ax6000 FirmwareAsus Xt12 FirmwareAsus Rt-ax58u FirmwareAsus Xt9 FirmwareAsus Xd6 FirmwareAsus Gt-ax11000 Pro FirmwareAsus Gt-axe16000 FirmwareAsus Rt-ax86u FirmwareAsus Rt-ax68u FirmwareAsus Rt-ax82u FirmwareAsus Rt-ax56u FirmwareAsus Rt-ax55 FirmwareAsus Gt-ax11000 Firmware
9.8
CVSSv3
CVE-2018-18320
An issue exists in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows ...
Asuswrt-merlin Project Rt-ac5300 FirmwareAsuswrt-merlin Project Rt Ac1900p FirmwareAsuswrt-merlin Project Rt-ac68u FirmwareAsuswrt-merlin Project Rt-ac68p FirmwareAsuswrt-merlin Project Rt-ac88u FirmwareAsuswrt-merlin Project Rt-ac66u B1 FirmwareAsuswrt-merlin Project Rt-ac56u FirmwareAsuswrt-merlin Project Rt-ac3200 FirmwareAsuswrt-merlin Project Rt-ac68uf FirmwareAsuswrt-merlin Project Rt-ac87 FirmwareAsuswrt-merlin Project Rt-ac3100 FirmwareAsuswrt-merlin Project Rt-ac1900 FirmwareAsuswrt-merlin Project Rt-ac86u FirmwareAsuswrt-merlin Project Rt-ac2900 Firmware
9.8
CVSSv3
CVE-2018-8879
Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware prior to 3.0.0.4.382.50470 for devices allows remote malicious users to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request....
Asus Rt-ac66u Firmware
9.8
CVSSv3
CVE-2018-18319
An issue exists in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates tha...
Asuswrt-merlin Project Rt-ac5300 FirmwareAsuswrt-merlin Project Rt Ac1900p FirmwareAsuswrt-merlin Project Rt-ac68u FirmwareAsuswrt-merlin Project Rt-ac68p FirmwareAsuswrt-merlin Project Rt-ac88u FirmwareAsuswrt-merlin Project Rt-ac66u B1 FirmwareAsuswrt-merlin Project Rt-ac56u FirmwareAsuswrt-merlin Project Rt-ac3200 FirmwareAsuswrt-merlin Project Rt-ac68uf FirmwareAsuswrt-merlin Project Rt-ac87 FirmwareAsuswrt-merlin Project Rt-ac3100 FirmwareAsuswrt-merlin Project Rt-ac1900 FirmwareAsuswrt-merlin Project Rt-ac86u FirmwareAsuswrt-merlin Project Rt-ac2900 Firmware
9.8
CVSSv3
CVE-2017-11420
Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-...
Asuswrt-merlin Project Rt-ac5300 FirmwareAsuswrt-merlin Project Rt Ac1900p FirmwareAsuswrt-merlin Project Rt-ac68u FirmwareAsuswrt-merlin Project Rt-ac68p FirmwareAsuswrt-merlin Project Rt-ac88u FirmwareAsuswrt-merlin Project Rt-ac66u FirmwareAsuswrt-merlin Project Rt-ac66u B1 FirmwareAsuswrt-merlin Project Rt-ac58u FirmwareAsuswrt-merlin Project Rt-ac56u FirmwareAsuswrt-merlin Project Rt-ac55u FirmwareAsuswrt-merlin Project Rt-ac52u FirmwareAsuswrt-merlin Project Rt-ac51u FirmwareAsuswrt-merlin Project Rt-n18u FirmwareAsuswrt-merlin Project Rt-n66u FirmwareAsuswrt-merlin Project Rt-n56u FirmwareAsuswrt-merlin Project Rt-ac3200 FirmwareAsuswrt-merlin Project Rt-ac3100 FirmwareAsuswrt-merlin Project Rt Ac1200gu FirmwareAsuswrt-merlin Project Rt Ac1200g FirmwareAsuswrt-merlin Project Rt-ac1200 FirmwareAsuswrt-merlin Project Rt-ac53 FirmwareAsuswrt-merlin Project Rt-n12hp Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook