Approved changes feed: RSS · Atom
cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Asuswrt (68dafea5-c1e7-5569-83cb-e50ec087466a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-26376 |
vulnerable | 2026-06-08 05:41:51.836544 |
Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
Published: 2022-08-05T21:18:47.095Z
Updated: 2025-04-15T18:53:55.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6000 |
vulnerable | 2026-06-08 05:11:53.204975 |
Details available
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote administrative access, via a crafted request. This is available to unauthenticated attackers in conjunction with CVE-2018-5999.
Published: 2018-01-22T20:00:00.000Z
Updated: 2024-08-05T05:47:56.273Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5999 |
vulnerable | 2026-06-08 05:11:53.204256 |
Details available
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.
Published: 2018-01-22T20:00:00.000Z
Updated: 2024-08-05T05:47:56.174Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15656 |
vulnerable | 2026-06-08 05:08:59.361254 |
Details available
Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.
Published: 2018-01-31T20:00:00.000Z
Updated: 2024-08-05T19:57:27.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15655 |
vulnerable | 2026-06-08 05:08:59.360926 |
Details available
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously disclosed. Some end-of-life routers have this version as the newest and thus are vulnerable at this time. This vulnerability allows for RCE with administrator rights when the administrator visits several pages.
Published: 2018-01-31T20:00:00.000Z
Updated: 2024-08-05T19:57:27.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15654 |
vulnerable | 2026-06-08 05:08:59.360510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.