Approved changes feed: RSS · Atom

cpe:2.3:o:asus:asus_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductAsus Firmware (60176721-501c-5273-ba6e-3141d27ec4e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15101 vulnerable 2026-06-08 07:06:35.697399 Details available
An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands via a crafted parameter. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2026-03-26T02:01:26.642Z
Updated: 2026-05-13T01:44:37.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31889 vulnerable 2026-06-08 06:04:43.576451 Details available
An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T15:03:28.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8878 vulnerable 2026-06-08 05:12:06.635172 Details available
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.
Published: 2020-02-27T21:12:40.000Z
Updated: 2024-08-05T07:10:46.214Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8877 vulnerable 2026-06-08 05:12:06.633785 Details available
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.
Published: 2020-02-27T21:11:29.000Z
Updated: 2024-08-05T07:10:47.068Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.