ASUS RT-AC86U Firmware 3.0.0.4 386 51529
Approved changes feed: RSS · Atom
cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4_386_51529:*:*:*:*:*:*:*
part: o version: 3.0.0.4_386_51529 update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ac86U Firmware (0c49d115-7550-5586-a601-2e9442ffa1ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39240 |
vulnerable | 2026-06-08 06:09:36.102012 |
ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:25:32.504Z
Updated: 2024-09-26T19:19:30.745Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39239 |
vulnerable | 2026-06-08 06:09:36.097443 |
ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:18:39.017Z
Updated: 2024-09-26T18:56:33.349Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39238 |
vulnerable | 2026-06-08 06:09:36.096196 |
ASUS RT-AX55、RT-AX56U_V2 - Format String - 1
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:10:47.153Z
Updated: 2024-09-26T18:58:30.829Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39237 |
vulnerable | 2026-06-08 06:09:36.086496 |
ASUS RT-AC86U - Command injection vulnerability - 5
HIGH (8.8)
ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.
Published: 2023-09-07T06:53:39.760Z
Updated: 2024-09-26T18:59:41.663Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39236 |
vulnerable | 2026-06-08 06:09:36.085774 |
ASUS RT-AC86U - Command injection vulnerability - 4
HIGH (8.8)
ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services.
Published: 2023-09-07T06:49:26.746Z
Updated: 2024-09-26T19:02:58.787Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38033 |
vulnerable | 2026-06-08 06:08:16.756350 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38032 |
vulnerable | 2026-06-08 06:08:16.751668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38031 |
vulnerable | 2026-06-08 06:08:16.750873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35087 |
vulnerable | 2026-06-08 06:06:26.536312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35086 |
vulnerable | 2026-06-08 06:06:26.534345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.