Approved changes feed: RSS · Atom

cpe:2.3:o:asus:rt-ac3200_firmware:3.0.0.4.382.50010:*:*:*:*:*:*:*

part: o version: 3.0.0.4.382.50010 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ac3200 Firmware (c105c44d-11d6-5529-95e3-6b53f891b259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14714 vulnerable 2026-06-08 05:10:53.318353 Details available
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.
Published: 2019-05-13T12:24:24.000Z
Updated: 2024-08-05T09:38:13.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14713 vulnerable 2026-06-08 05:10:53.318046 Details available
Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter.
Published: 2019-05-13T12:22:09.000Z
Updated: 2024-08-05T09:38:13.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14712 vulnerable 2026-06-08 05:10:53.317723 Details available
Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.
Published: 2019-05-13T12:21:11.000Z
Updated: 2024-08-05T09:38:13.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14711 vulnerable 2026-06-08 05:10:53.317396 Details available
Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted URLs.
Published: 2019-05-13T12:20:19.000Z
Updated: 2024-08-05T09:38:13.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14710 vulnerable 2026-06-08 05:10:53.316162 Details available
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.
Published: 2019-05-13T12:19:24.000Z
Updated: 2024-08-05T09:38:13.026Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.