Approved changes feed: RSS · Atom

cpe:2.3:a:asus:rt-ax88u:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ax88U (9d13178e-5cd6-5dea-a8de-e5c59d19a355)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3080 vulnerable 2026-06-08 06:41:52.373600 ASUS Router - Improper Authentication
CRITICAL (9.8)
Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.
Published: 2024-06-14T02:57:27.002Z
Updated: 2024-08-01T19:32:42.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3079 vulnerable 2026-06-08 06:41:52.369843 ASUS Router - Stack-based Buffer Overflow
HIGH (7.2)
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
Published: 2024-06-14T02:32:21.718Z
Updated: 2024-08-01T19:32:42.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0401 vulnerable 2026-06-08 06:22:00.572653 ASUS OVPN RCE
HIGH (7.2)
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.
Published: 2024-05-20T16:55:18.891Z
Updated: 2025-11-22T12:25:40.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41349 vulnerable 2026-06-08 06:11:05.987856 ASUS RT-AX88U - externally-controlled format string
HIGH (8.8)
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.
Published: 2023-09-18T02:36:30.234Z
Updated: 2024-09-25T15:39:19.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34360 vulnerable 2026-06-08 06:06:25.343158 ASUS RT-AX88U - Stored XSS
HIGH (8.2)
A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.  After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.
Published: 2023-07-31T05:32:14.662Z
Updated: 2024-09-27T21:58:28.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34359 vulnerable 2026-06-08 06:06:25.342716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34358 vulnerable 2026-06-08 06:06:25.341209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26674 vulnerable 2026-06-08 05:41:52.798773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26673 vulnerable 2026-06-08 05:41:52.796605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.