Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tm-ac1900 vulnerabilities and exploits

(subscribe to this query)
632
VMScore
CVE-2014-2718
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware (1) update information or (2) downloaded updates, which allows man-in-the-middle (...
T-mobile Tm-ac1900 3.0.0.4.376 3169Asus Rt Series Firmware
1000
VMScore
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote malicious users to bypass authentication and execute...
T-mobile Tm-ac1900 3.0.0.4.376 3169Asus Wrt Firmware 3.0.0.4.376.2524-g0012f52Asus Wrt Firmware 3.0.0.4.376 1071
383
VMScore
CVE-2014-2925
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware prior to 3.0.0.4.374.5047 allows remote malicious users to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.
T-mobile Tm-ac1900 3.0.0.4.376 3169Asus Rt-ac68u FirmwareAsus Rt-ac68u Firmware 3.0.0.4.374.4755Asus Rt-ac68u Firmware 3.0.0.4.374 4887Asus Rt-ac68u -
855
VMScore
CVE-2013-5948
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware prior to 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
T-mobile Tm-ac1900 3.0.0.4.376 3169Asus Rt-ac68u Firmware 3.0.0.4.374 4561Asus Rt-ac68u Firmware 3.0.0.4.374 4887Asus Rt-ac68u Firmware 3.0.0.4.374.4755Asus Rt-ac68u -
890
VMScore
CVE-2018-9285
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices prior to 3.0.0.4.384_10007; RT-N18U devices prior to 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices prior to 3.0.0.4.382.50010; and RT-AC5300 dev...
Asus Rt-ac66u FirmwareAsus Rt-ac68u FirmwareAsus Rt-ac86u FirmwareAsus Rt-ac88u FirmwareAsus Rt-ac1900 FirmwareAsus Rt-ac2900 FirmwareAsus Rt-ac3100 FirmwareAsus Rt-n18u FirmwareAsus Rt-ac87u FirmwareAsus Rt-ac3200 FirmwareAsus Rt-ac5300 Firmware
828
VMScore
CVE-2015-6949
Stack-based buffer overflow in the ASUS TM-AC1900 router allows remote malicious users to execute arbitrary code via crafted HTTP header values.
Asus Tm-1900 -
561
VMScore
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware prior to 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
Asus Rt-ac66u Firmware 3.0.0.4.140Asus Rt-ac66u Firmware 3.0.0.4.220Asus Rt-ac66u Firmware 3.0.0.4.246Asus Rt-ac66u Firmware 3.0.0.4.260Asus Rt-n16 Firmware 3.0.0.3.108Asus Rt-n16 Firmware 3.0.0.3.162Asus Rt-n16 Firmware 3.0.0.3.178Asus Rt-n16 Firmware 3.0.0.4.220Asus Rt-n56u Firmware 3.0.0.4.334Asus Rt-n56u Firmware 3.0.0.4.342Asus Rt-n56u Firmware 3.0.0.4.360Asus Rt-n56u Firmware 7.0.1.21Asus Rt-n56u Firmware 7.0.1.32Asus Rt-n10e Firmware 2.0.0.19Asus Rt-n10e Firmware 2.0.0.20Asus Rt-n10e Firmware 2.0.0.24Asus Rt-n10e Firmware 2.0.0.25Asus Rt-n56u Firmware 1.0.1.4Asus Rt-n56u Firmware 1.0.1.4oAsus Rt-n56u Firmware 1.0.1.7cAsus Rt-n56u Firmware 1.0.1.7fAsus Rt-n65u Firmware 3.0.0.4.334
605
VMScore
CVE-2011-2716
The DHCP client (udhcpc) in BusyBox prior to 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
T-mobile Tm-ac1900 3.0.0.4.376 3169Busybox Busybox 1.18.5Busybox Busybox 1.18.4Busybox Busybox 1.17.2Busybox Busybox 1.18.3Busybox Busybox 1.18.2Busybox Busybox 1.17.0Busybox Busybox 1.16.2Busybox Busybox 1.16.1Busybox Busybox 1.14.3Busybox Busybox 1.14.2Busybox Busybox 1.13.0Busybox Busybox 1.12.4Busybox Busybox 1.11.0Busybox Busybox 1.10.4Busybox Busybox 1.9.0Busybox Busybox 1.8.2Busybox Busybox 1.6.1Busybox Busybox 1.6.0Busybox Busybox 1.3.0Busybox Busybox 1.2.2.1Busybox Busybox 1.1.0
641
VMScore
CVE-2013-1813
util-linux/mdev.c in BusyBox prior to 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
Redhat Enterprise Linux 6.0T-mobile Tm-ac1900 3.0.0.4.376 3169Busybox Busybox 0.38Busybox Busybox 0.46Busybox Busybox 0.47Busybox Busybox 0.60.1Busybox Busybox 0.60.2Busybox Busybox 0.60.3Busybox Busybox 1.1.2Busybox Busybox 1.1.3Busybox Busybox 1.11.1Busybox Busybox 1.11.2Busybox Busybox 1.13.1Busybox Busybox 1.13.2Busybox Busybox 1.14.4Busybox Busybox 1.15.0Busybox Busybox 1.17.0Busybox Busybox 1.17.1Busybox Busybox 1.18.4Busybox Busybox 1.18.5Busybox Busybox 1.2.2Busybox Busybox 1.2.2.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook