Approved changes feed: RSS · Atom

cpe:2.3:h:asus:rt-ax82u:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ax82U (127835f4-6470-536a-aba7-650c6e180248)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38393 not_vulnerable 2026-06-08 05:47:16.292235 Details available
HIGH (7.5)
A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Published: 2023-01-10T20:37:32.449Z
Updated: 2024-08-03T10:54:03.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38105 not_vulnerable 2026-06-08 05:47:15.786216 Details available
HIGH (7.5)
An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
Published: 2023-01-10T20:44:26.241Z
Updated: 2024-08-03T10:45:52.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35401 not_vulnerable 2026-06-08 05:46:04.571959 Details available
CRITICAL (9)
An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to full administrative access to the device. An attacker would need to send a series of HTTP requests to exploit this vulnerability.
Published: 2023-01-10T20:44:50.554Z
Updated: 2025-03-05T19:35:53.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26376 not_vulnerable 2026-06-08 05:41:51.854358 Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
Published: 2022-08-05T21:18:47.095Z
Updated: 2025-04-15T18:53:55.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43702 not_vulnerable 2026-06-08 05:36:43.759128 Details available
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Published: 2022-07-05T11:50:03.000Z
Updated: 2024-08-04T04:03:08.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41436 not_vulnerable 2026-06-08 05:35:20.551141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41435 not_vulnerable 2026-06-08 05:35:20.536030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3128 not_vulnerable 2026-06-08 05:33:50.830069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.