Approved changes feed: RSS · Atom
cpe:2.3:a:asus:router:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Router (10f5ad93-9c8d-5537-bf01-a759cdbbad64) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13385 |
vulnerable | 2026-07-29 00:23:33.010143 |
Details available
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle(MITM) user to make the router download and execute arbitrary command via a spoofed server.
Refer to the '
Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Published: 2026-07-15T02:01:46.495Z
Updated: 2026-07-16T03:55:22.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11851 |
vulnerable | 2026-07-29 00:23:31.719169 |
Details available
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation
Refer to the '
Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
Published: 2026-07-15T02:00:26.440Z
Updated: 2026-07-15T12:35:35.495Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59372 |
vulnerable | 2026-06-08 07:35:21.740453 |
Details available
A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity.
Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:54.219Z
Updated: 2025-11-25T14:04:34.837Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59371 |
vulnerable | 2026-06-08 07:35:21.739976 |
Details available
An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models.
Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:34.849Z
Updated: 2026-02-26T16:07:35.646Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59370 |
vulnerable | 2026-06-08 07:35:21.739376 |
Details available
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the device executing unintended instructions.
Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:09.518Z
Updated: 2026-02-26T16:07:36.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59369 |
vulnerable | 2026-06-08 07:35:21.738884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59368 |
vulnerable | 2026-06-08 07:35:21.738451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59366 |
vulnerable | 2026-06-08 07:35:21.723666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59365 |
vulnerable | 2026-06-08 07:35:21.720566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2492 |
vulnerable | 2026-06-08 07:16:57.118916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15101 |
vulnerable | 2026-06-08 07:06:35.696384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12003 |
vulnerable | 2026-06-08 07:04:29.536652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13062 |
vulnerable | 2026-06-08 06:25:36.628731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12912 |
vulnerable | 2026-06-08 06:25:36.331082 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.