GCVE - cpe:2.3:a:asus:download_master:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:asus:download_master:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Asus (`8cdf1a5f-f554-5682-aa69-77df29ab6a26`)
Product	Download Master (`1e0ca89f-d4be-5e59-877e-febfc332c9ae`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-31163`	vulnerable	2026-06-08 06:35:31.042043	ASUS Download Master - Buffer Overflow HIGH (7.2) ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. Published: 2024-06-14T06:52:50.331Z Updated: 2024-08-02T01:46:04.321Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7869-3db1d-1.html https://www.twcert.org.tw/en/cp-139-7870-befb5-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31162`	vulnerable	2026-06-08 06:35:31.041708	ASUS Download Master - OS Command Injection HIGH (7.2) The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the device. Published: 2024-06-14T06:35:07.192Z Updated: 2024-08-02T01:46:04.365Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7867-8fad9-1.html https://www.twcert.org.tw/en/cp-139-7868-8a760-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31161`	vulnerable	2026-06-08 06:35:31.041229	ASUS Download Master - Arbitrary File Upload HIGH (7.2) The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage. Published: 2024-06-14T03:53:51.560Z Updated: 2024-08-02T01:46:04.773Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7865-d3823-1.html https://www.twcert.org.tw/en/cp-139-7866-469e0-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31160`	vulnerable	2026-06-08 06:35:31.040846	ASUS Download Master - Stored XSS MEDIUM (4.8) The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Stored Cross-site scripting attacks. Published: 2024-06-14T03:41:21.402Z Updated: 2024-08-02T01:46:04.470Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7863-49a2d-1.html https://www.twcert.org.tw/en/cp-139-7864-d7a0d-2.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-31159`	vulnerable	2026-06-08 06:35:31.040421	ASUS Download Master - Reflected XSS MEDIUM (4.8) The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks. Published: 2024-06-14T03:25:03.735Z Updated: 2024-08-02T01:46:04.534Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7861-1a06f-1.html https://www.twcert.org.tw/en/cp-139-7862-e43e4-2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.