Search vulnerabilities

Results 2

Export CSV
CVE-2022-26376

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Products
Asuswrt Et12 Et12 Firmware and 33 more
CVE-2021-37910

ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.

CVSS 3.1 · 3.7 Low EPSS 2.1% KEV · Not listed
Vendors