Asus RT-AX88U
Approved changes feed: RSS · Atom
cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ax88U (9d13178e-5cd6-5dea-a8de-e5c59d19a355) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41349 |
not_vulnerable | 2026-06-08 06:11:05.989618 |
ASUS RT-AX88U - externally-controlled format string
HIGH (8.8)
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.
Published: 2023-09-18T02:36:30.234Z
Updated: 2024-09-25T15:39:19.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41349 |
vulnerable | 2026-06-08 06:11:05.986695 |
ASUS RT-AX88U - externally-controlled format string
HIGH (8.8)
ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN function. An authenticated remote attacker can exploit the exported OpenVPN configuration to execute an externally-controlled format string attack, resulting in sensitivity information leakage, or forcing the device to reset and permanent denial of service.
Published: 2023-09-18T02:36:30.234Z
Updated: 2024-09-25T15:39:19.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34360 |
not_vulnerable | 2026-06-08 06:06:25.343213 |
ASUS RT-AX88U - Stored XSS
HIGH (8.2)
A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior. After a remote attacker logging in device with regular user privilege, the remote attacker can perform a Stored Cross-site Scripting (XSS) attack by uploading image which containing JavaScript code.
Published: 2023-07-31T05:32:14.662Z
Updated: 2024-09-27T21:58:28.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34359 |
not_vulnerable | 2026-06-08 06:06:25.342765 |
ASUS RT-AX88U - Out-of-bounds Read - 2
HIGH (7.5)
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.
Published: 2023-07-31T04:31:39.240Z
Updated: 2024-10-21T14:37:30.329Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34359 |
vulnerable | 2026-06-08 06:06:25.342674 |
ASUS RT-AX88U - Out-of-bounds Read - 2
HIGH (7.5)
ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.
Published: 2023-07-31T04:31:39.240Z
Updated: 2024-10-21T14:37:30.329Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34358 |
not_vulnerable | 2026-06-08 06:06:25.342166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34358 |
vulnerable | 2026-06-08 06:06:25.340329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26674 |
not_vulnerable | 2026-06-08 05:41:52.798853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26673 |
not_vulnerable | 2026-06-08 05:41:52.798268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43702 |
not_vulnerable | 2026-06-08 05:36:43.757523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41437 |
not_vulnerable | 2026-06-08 05:35:20.552602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41436 |
not_vulnerable | 2026-06-08 05:35:20.551583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41435 |
not_vulnerable | 2026-06-08 05:35:20.542618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3128 |
not_vulnerable | 2026-06-08 05:33:50.833024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20335 |
not_vulnerable | 2026-06-08 05:11:26.989547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20334 |
not_vulnerable | 2026-06-08 05:11:26.986947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20333 |
not_vulnerable | 2026-06-08 05:11:26.975774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.