Approved changes feed: RSS · Atom

cpe:2.3:o:asus:rt-ax55_firmware:3.0.0.4.386_50460:*:*:*:*:*:*:*

part: o version: 3.0.0.4.386_50460 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ax55 Firmware (53676fbd-ff9d-5ad5-904e-0cc5405367aa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39240 vulnerable 2026-06-08 06:09:36.101823 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:25:32.504Z
Updated: 2024-09-26T19:19:30.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39239 vulnerable 2026-06-08 06:09:36.097245 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:18:39.017Z
Updated: 2024-09-26T18:56:33.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39238 vulnerable 2026-06-08 06:09:36.094993 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1
HIGH (7.2)
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2023-09-07T07:10:47.153Z
Updated: 2024-09-26T18:58:30.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.