ASUS HG100
Approved changes feed: RSS · Atom
cpe:2.3:h:asus:hg100:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Hg100 (cc354459-3c36-517c-8c5d-c09e9948b6cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15912 |
not_vulnerable | 2026-06-08 05:12:58.213374 |
Details available
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.
Published: 2019-12-20T16:03:50.000Z
Updated: 2024-08-05T01:03:32.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15911 |
not_vulnerable | 2026-06-08 05:12:58.212379 |
Details available
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.
Published: 2019-12-20T16:03:38.000Z
Updated: 2024-08-05T01:03:32.589Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15910 |
not_vulnerable | 2026-06-08 05:12:58.203899 |
Details available
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.
Published: 2019-12-20T16:03:19.000Z
Updated: 2024-08-05T01:03:31.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11061 |
not_vulnerable | 2026-06-08 05:12:26.339902 |
HG100 has a broken access control vulnerability in its Web API Server
CRITICAL (10)
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
Published: 2019-08-29T00:18:59.682Z
Updated: 2024-09-16T20:22:13.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11060 |
not_vulnerable | 2026-06-08 05:12:26.339277 |
HG100 contains an Uncontrolled Resource Consumption vulnerability
HIGH (7.4)
The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).
Published: 2019-08-29T00:19:45.655Z
Updated: 2024-09-16T17:49:18.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11492 |
not_vulnerable | 2026-06-08 05:10:38.578267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11491 |
not_vulnerable | 2026-06-08 05:10:38.576771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.