Approved changes feed: RSS · Atom

cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ac66U B1 (094f2535-8f97-5226-893e-2b95e3d3f23d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39086 not_vulnerable 2026-06-08 06:09:35.756719 Details available
ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
Published: 2023-08-08T00:00:00.000Z
Updated: 2026-07-09T00:27:39.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39086 vulnerable 2026-06-08 06:09:35.755104 Details available
ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
Published: 2023-08-08T00:00:00.000Z
Updated: 2026-07-09T00:27:39.438Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43702 not_vulnerable 2026-06-08 05:36:43.755814 Details available
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Published: 2022-07-05T11:50:03.000Z
Updated: 2024-08-04T04:03:08.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3128 not_vulnerable 2026-06-08 05:33:50.834576 Details available
In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.
Published: 2021-04-12T17:41:07.000Z
Updated: 2024-08-03T16:45:51.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20335 not_vulnerable 2026-06-08 05:11:26.989189 Details available
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.
Published: 2020-03-20T00:11:09.000Z
Updated: 2024-08-05T11:58:18.948Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20334 not_vulnerable 2026-06-08 05:11:26.986519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20333 not_vulnerable 2026-06-08 05:11:26.968840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.