GCVE - cpe:2.3:o:asus:gt-ac5300_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:asus:gt-ac5300_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Asus (`8cdf1a5f-f554-5682-aa69-77df29ab6a26`)
Product	Gt Ac5300 Firmware (`26696952-496c-5c19-80bb-e0a24fe3de4a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-17127`	vulnerable	2026-06-08 05:11:05.965125	Details available blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a timestap parameter. Published: 2018-09-17T04:00:00.000Z Updated: 2024-08-05T10:39:59.539Z Open on db.gcve.eu Reference links https://github.com/PAGalaxyLab/VulInfo/tree/master/ASUS/GT-AC5300/dos1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17023`	vulnerable	2026-06-08 05:11:05.863473	Details available Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request to start_apply.htm. Published: 2018-09-13T19:00:00.000Z Updated: 2024-09-16T17:07:54.660Z Open on db.gcve.eu Reference links https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/csrf_bypass_referer/ASUS%20GT-AC5300%20csrf%20bypass%20referer.MD	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17022`	vulnerable	2026-06-08 05:11:05.863048	Details available Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact by setting a long sh_path0 value and then sending an appGet.cgi?hook=select_list("Storage_x_SharedPath") request, because ej_select_list in router/httpd/web.c uses strcpy. Published: 2018-09-13T19:00:00.000Z Updated: 2024-09-17T03:48:36.904Z Open on db.gcve.eu Reference links https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/buffer_overflow/ASUS%20GT-AC5300%20stack%20overflow.MD	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17021`	vulnerable	2026-06-08 05:11:05.862585	Details available Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter. Published: 2018-09-13T19:00:00.000Z Updated: 2024-09-16T20:31:40.252Z Open on db.gcve.eu Reference links https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ac5300_xss/ASUS%20GT-AC5300%20XSS.MD	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17020`	vulnerable	2026-06-08 05:11:05.861428	Details available ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line. Published: 2018-09-13T19:00:00.000Z Updated: 2024-09-17T00:42:20.571Z Open on db.gcve.eu Reference links https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ASUS%20GT-AC5300%20DOS1.MD	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.