Rt Ax88U Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ax88U Firmware (35b0c66b-dab4-5087-bfd1-e497087c5585) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41349 |
vulnerable | 2026-06-08 06:11:05.989445 |
ASUS RT-AX88U - externally-controlled format string
HIGH (8.8)
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.
Published: 2023-09-18T02:36:30.234Z
Updated: 2024-09-25T15:39:19.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34360 |
vulnerable | 2026-06-08 06:06:25.343189 |
ASUS RT-AX88U - Stored XSS
HIGH (8.2)
A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.
Published: 2023-07-31T05:32:14.662Z
Updated: 2024-09-27T21:58:28.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34359 |
vulnerable | 2026-06-08 06:06:25.342744 |
ASUS RT-AX88U - Out-of-bounds Read - 2
HIGH (7.5)
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.
Published: 2023-07-31T04:31:39.240Z
Updated: 2024-10-21T14:37:30.329Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34358 |
vulnerable | 2026-06-08 06:06:25.342008 |
ASUS RT-AX88U - Out-of-bounds Read - 1
HIGH (7.5)
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c, resulting in a DoS condition.
Published: 2023-07-31T04:09:05.030Z
Updated: 2024-10-21T14:42:51.136Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26674 |
vulnerable | 2026-06-08 05:41:52.798821 |
ASUS RT-AX88U - Format String
CRITICAL (9.8)
ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Published: 2022-04-22T06:50:19.853Z
Updated: 2024-09-16T17:22:36.117Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26673 |
vulnerable | 2026-06-08 05:41:52.797459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41437 |
vulnerable | 2026-06-08 05:35:20.552577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41436 |
vulnerable | 2026-06-08 05:35:20.551565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41435 |
vulnerable | 2026-06-08 05:35:20.541947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3128 |
vulnerable | 2026-06-08 05:33:50.832335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.