ASUS RT-AC87U
Approved changes feed: RSS · Atom
cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ac87U (3abad43a-64fd-57fc-9fb5-436a6fc9ecc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-47678 |
not_vulnerable | 2026-06-08 06:14:25.385521 |
Details available
An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.
Published: 2023-11-15T01:31:11.437Z
Updated: 2024-08-27T18:25:42.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43702 |
not_vulnerable | 2026-06-08 05:36:43.828223 |
Details available
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Published: 2022-07-05T11:50:03.000Z
Updated: 2024-08-04T04:03:08.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9285 |
not_vulnerable | 2026-06-08 05:12:08.014011 |
Details available
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.
Published: 2018-04-04T19:00:00.000Z
Updated: 2024-08-05T07:17:52.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20335 |
not_vulnerable | 2026-06-08 05:11:26.989336 |
Details available
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.
Published: 2020-03-20T00:11:09.000Z
Updated: 2024-08-05T11:58:18.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20334 |
not_vulnerable | 2026-06-08 05:11:26.986668 |
Details available
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.
Published: 2020-03-20T00:11:06.000Z
Updated: 2024-08-05T11:58:18.926Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20333 |
not_vulnerable | 2026-06-08 05:11:26.971436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0581 |
not_vulnerable | 2026-06-08 05:10:24.175623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7270 |
vulnerable | 2026-06-08 05:05:59.201620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7269 |
vulnerable | 2026-06-08 05:05:59.200009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.