Asus RT-AX92U
Approved changes feed: RSS · Atom
cpe:2.3:h:asus:rt-ax92u:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ax92U (0a1398a0-b891-5346-aeb8-89ee16a9831a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-35720 |
not_vulnerable | 2026-06-08 06:06:27.499978 |
ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability
MEDIUM (6.5)
ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the mod_webdav.so module. When parsing a request, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-16078.
Published: 2024-05-03T01:57:40.156Z
Updated: 2024-08-02T16:30:44.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43702 |
not_vulnerable | 2026-06-08 05:36:43.762481 |
Details available
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Published: 2022-07-05T11:50:03.000Z
Updated: 2024-08-04T04:03:08.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41436 |
not_vulnerable | 2026-06-08 05:35:20.551616 |
Details available
An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.
Published: 2021-11-19T11:14:09.000Z
Updated: 2026-07-09T00:14:52.720Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41435 |
not_vulnerable | 2026-06-08 05:35:20.543610 |
Details available
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
Published: 2021-11-19T11:26:30.000Z
Updated: 2026-07-09T00:14:51.487Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20335 |
not_vulnerable | 2026-06-08 05:11:26.989564 |
Details available
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.
Published: 2020-03-20T00:11:09.000Z
Updated: 2024-08-05T11:58:18.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20334 |
not_vulnerable | 2026-06-08 05:11:26.987056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20333 |
not_vulnerable | 2026-06-08 05:11:26.976251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.