Skip to content
Noroxi

ASUS records

293 published records for vendor asus.

Researcher profile

Entered KEV
3 · 1%
Weaponized
8 · 2.7%
Pre-auth RCE
30
With a fix record
0.7%
Median publish → KEV
630 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

293 records
  • CVE-2021-32030
    99Now

    The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authenticatio

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    asus · lyra mini firmwareMay 6, 2021

  • CVE-2023-39780
    77This week

    On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist

    HighCVSS 8.8KEVWeaponizedEPSS 39%

    asus · rt-ax55 firmwareSep 11, 2023

  • CVE-2025-59374
    67This week

    "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced thro

    CriticalCVSS 9.3KEVWeaponizedEPSS 1%

    asus · live updateDec 17, 2025

  • CVE-2018-5999
    65This week

    An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

    CriticalCVSS 9.8WeaponizedEPSS 87%

    asus · asuswrtJan 22, 2018

  • CVE-2018-6000
    65This week

    An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

    CriticalCVSS 9.8WeaponizedEPSS 85%

    asus · asuswrtJan 22, 2018

  • CVE-2014-9583
    64This week

    common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and ot

    CriticalCVSS 10.0WeaponizedEPSS 80%

    asus · wrt firmwareJan 8, 2015

  • CVE-2008-1491
    61This week

    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows re

    CriticalCVSS 10.0WeaponizedEPSS 70%

    asus · remote consoleMar 25, 2008

  • CVE-2024-3080
    52Plan

    ASUS Router - Improper Authentication

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    asus · zenwifi xt8Jun 13, 2024

  • CVE-2012-4924
    48Plan

    Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers

    CriticalCVSS 9.3WeaponizedEPSS 36%

    asus · ipswcom activex componentSep 15, 2012

  • CVE-2018-14714
    47Plan

    System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load

    CriticalCVSS 9.8Proof of conceptEPSS 27%

    asus · rt-ac3200 firmwareMay 13, 2019

  • CVE-2017-6548
    45Plan

    Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC

    CriticalCVSS 9.8Proof of conceptEPSS 21%

    asus · rt-ac53 firmwareMar 9, 2017

  • CVE-2022-31874
    45Plan

    ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface.

    CriticalCVSS 9.8No exploitEPSS 19%

    asus · rt-n53 firmwareJun 17, 2022

  • CVE-2023-26602
    44Plan

    ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrat

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    asus · asmb8-ikvm firmwareFeb 26, 2023

  • CVE-2018-8879
    44Plan

    Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devi

    CriticalCVSS 9.8No exploitEPSS 17%

    asus · rt-ac66u firmwareNov 21, 2019

  • CVE-2013-4659
    43Plan

    Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    asus · rt-ac66u firmwareMar 14, 2017

  • CVE-2019-10709
    42Plan

    AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    asus · precision touchpadSep 4, 2019

  • CVE-2013-6343
    42Plan

    Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to

    CriticalCVSS 10.0Proof of conceptEPSS 7%

    asus · tm-ac1900 firmwareJan 22, 2014

  • CVE-2018-11491
    41Plan

    ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.

    CriticalCVSS 9.8No exploitEPSS 6%

    asus · hg100 firmwareJul 25, 2018

  • CVE-2021-41435
    41Plan

    A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, R

    CriticalCVSS 9.8No exploitEPSS 6%

    asus · gt-ax11000 firmwareNov 19, 2021

  • CVE-2013-4937
    41Plan

    Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U w

    CriticalCVSS 10.0No exploitEPSS 1%

    asus · rt-ac66u firmwareJul 26, 2013

  • CVE-2023-35086
    40Plan

    ASUS RT-AX56U V2 & RT-AC86U - Format String -1

    HighCVSS 7.2Proof of conceptEPSS 38%

    asus · rt-ac86u firmwareJul 21, 2023

  • CVE-2022-4221
    40Plan

    OS command injection in ASUS M25 NAS

    CriticalCVSS 9.8No exploitEPSS 4%

    asus · nas-m25 firmwareDec 1, 2022

  • CVE-2020-36109
    40Plan

    ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    asus · rt-ax86u firmwareFeb 1, 2021

  • CVE-2018-8826
    40Plan

    ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200

    CriticalCVSS 9.8No exploitEPSS 4%

    asus · rt-ac51u firmwareApr 20, 2018

  • CVE-2018-20334
    40Plan

    An issue was discovered in ASUSWRT 3.0.0.4.384.20308.

    CriticalCVSS 9.8No exploitEPSS 3%

    asus · asuswrtMar 19, 2020