Approved changes feed: RSS · Atom

cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ac66U (3bab57b4-f542-51f6-a53c-3feb6a83916d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43702 not_vulnerable 2026-06-08 05:36:43.877832 Details available
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device.
Published: 2022-07-05T11:50:03.000Z
Updated: 2024-08-04T04:03:08.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7997 not_vulnerable 2026-06-08 05:27:14.608054 Details available
ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.
Published: 2020-01-28T04:33:24.000Z
Updated: 2024-08-04T09:48:25.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9285 not_vulnerable 2026-06-08 05:12:08.002841 Details available
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.
Published: 2018-04-04T19:00:00.000Z
Updated: 2024-08-05T07:17:52.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8879 not_vulnerable 2026-06-08 05:12:06.637206 Details available
Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request. Vulnerable parameters are flag, mac, and cat_id.
Published: 2019-11-21T15:26:03.000Z
Updated: 2024-08-05T07:10:46.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8826 not_vulnerable 2026-06-08 05:12:06.490813 Details available
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.
Published: 2018-04-20T20:00:00.000Z
Updated: 2024-08-05T07:02:26.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20335 not_vulnerable 2026-06-08 05:11:26.989155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20334 not_vulnerable 2026-06-08 05:11:26.986485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20333 not_vulnerable 2026-06-08 05:11:26.967527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6343 not_vulnerable 2026-06-08 05:04:56.018588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4937 vulnerable 2026-06-08 05:04:50.226170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4659 not_vulnerable 2026-06-08 05:04:49.012868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4656 not_vulnerable 2026-06-08 05:04:48.995707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3093 not_vulnerable 2026-06-08 05:04:30.127539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.