VYPR
← Asus

Vendor CVEs

Asus

All CVEs

285 total · sorted by risk
  • CVE-2021-34174Jul 14, 2021
    Asus
    AX6100
    risk 0.00cvss —epss 0.00

    A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUS AX6100. An attacker may cause a Denial of Service (DoS) to any device connected to BCM4352 or BCM43684 routers via an association or…

  • CVE-2021-3128Apr 12, 2021
    Asus
    RT-AX88U
    risk 0.00cvss —epss 0.02

    In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This…

  • CVE-2021-28686Apr 8, 2021
    Asus
    GPUTweak II
    risk 0.00cvss —epss 0.00

    AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl.

  • CVE-2021-28685Apr 8, 2021
    Asus
    GPUTweak II
    risk 0.00cvss —epss 0.00

    AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by calling one of several driver routines that map physical memory into the virtual address space of the calling process) and to interact with…

  • CVE-2021-28194Apr 6, 2021
    Asus
    BMC firmware Web management page
    risk 0.00cvss —epss 0.02

    The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to…

  • CVE-2021-28182Apr 6, 2021
    Asus
    ASUS BMC
    risk 0.00cvss —epss 0.02

    The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate…

  • CVE-2021-28179Apr 6, 2021
    Asus
    ASUS BMC
    risk 0.00cvss —epss 0.02

    The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to…

  • CVE-2021-26943Mar 31, 2021
    Asus
    UX360CA
    risk 0.00cvss —epss 0.01

    The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).

  • CVE-2021-3229Feb 5, 2021
    Asus
    RT-AX3000
    risk 0.00cvss —epss 0.03

    Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error.

  • CVE-2021-3166Jan 18, 2021
    Asus
    DSL-N14U-B1
    risk 0.00cvss —epss 0.03

    An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it…

  • CVE-2020-35219Jan 4, 2021
    Asus
    DSL-N17U
    risk 0.00cvss —epss 0.02

    The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Password= and…

  • CVE-2020-29656Dec 9, 2020
    Asus
    Download Master
    risk 0.00cvss —epss 0.01

    An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initial&download_type=General&special_cgi=get_language makes it possible to reach "unknown functionality" in a "known to be…

  • CVE-2020-15498Aug 26, 2020
    Asus
    RT-AC1900P
    risk 0.00cvss —epss 0.00

    An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files.

  • CVE-2020-15499Aug 26, 2020
    Asus
    RT-AC1900P
    risk 0.00cvss —epss 0.01

    An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page.

  • CVE-2020-15009Jul 20, 2020
    Asus
    ScreenPad2_Upgrade_Tool
    risk 0.00cvss —epss 0.00

    AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX and UX550GEX) could lead to unsigned code execution with no additional restrictions when a user puts an application at a…

  • CVE-2019-17603Jun 2, 2020
    Asus
    Aura Sync
    risk 0.00cvss —epss 0.01

    Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service (system crash) or gain privileges via IOCTL requests using crafted kernel addresses that trigger…

  • CVE-2020-10649Mar 25, 2020
    Asus
    Device Activation
    risk 0.00cvss —epss 0.01

    DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.

  • CVE-2018-20335Mar 20, 2020
    Asus
    Asuswrt
    risk 0.00cvss —epss 0.01

    An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.

  • CVE-2018-20334Mar 20, 2020
    Asus
    Asuswrt
    risk 0.00cvss —epss 0.04

    An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.

  • CVE-2013-3093Jan 28, 2020
    Asus
    Rt N56u
    risk 0.00cvss —epss 0.01

    ASUS RT-N56U devices allow CSRF.

  • CVE-2020-7997Jan 28, 2020
    Asus
    WRT-AC66U
    risk 0.00cvss —epss 0.01

    ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.

  • CVE-2019-15912Dec 20, 2019
    Asus
    MW100
    risk 0.00cvss —epss 0.01

    An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.

  • CVE-2019-15911Dec 20, 2019
    Asus
    MW100
    risk 0.00cvss —epss 0.01

    An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart…

  • CVE-2019-19235Dec 18, 2019
    Asus
    ATK Package
    risk 0.00cvss —epss 0.00

    AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name.

  • CVE-2019-15419Nov 14, 2019
    Asus
    ASUS_X015_1
    risk 0.00cvss —epss 0.00

    The Asus ASUS_X015_1 Android device with a build fingerprint of asus/CN_X015/ASUS_X015_1:7.0/NRD90M/CN_X015-14.00.1709.35-20171215:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app (versionCode=5, versionName=5.0.1) that allows…

  • CVE-2019-15418Nov 14, 2019
    Asus
    ASUS_X00K_1
    risk 0.00cvss —epss 0.00

    The Asus ASUS_X00K_1 Android device with a build fingerprint of asus/CN_X00K/ASUS_X00K_1:7.0/NRD90M/CN_X00K-14.01.1711.27-20180420:user/release-keys contains a pre-installed app with a package name of com.lovelyfont.defcontainer app (versionCode=5, versionName=5.0.1) that allows…

  • CVE-2019-15414Nov 14, 2019
    Asus
    ZenFone AR
    risk 0.00cvss —epss 0.00

    The Asus ZenFone AR Android device with a build fingerprint of asus/WW_ASUS_A002/ASUS_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app (versionCode=1510200105,…

  • CVE-2019-15413Nov 14, 2019
    Asus
    ZenFone 3 Ultra
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW_Phone/ASUS_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.splendidcommandagent app (versionCode=1510200105,…

  • CVE-2019-15412Nov 14, 2019
    Asus
    ZenFone 4 Selfie
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_71.50.395.57_20180913:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15410Nov 14, 2019
    Asus
    ZenFone 5Q
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15409Nov 14, 2019
    Asus
    ZenFone 5Q
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15408Nov 14, 2019
    Asus
    ZenFone 5 Lite
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 5 Lite Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15407Nov 14, 2019
    Asus
    ASUS_X015_1
    risk 0.00cvss —epss 0.00

    The Asus ASUS_X015_1 Android device with a build fingerprint of asus/CN_X015/ASUS_X015_1:7.0/NRD90M/CN_X015-14.00.1709.35-20171215:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015,…

  • CVE-2019-15406Nov 14, 2019
    Asus
    com.asus.loguploaderproxy
    risk 0.00cvss —epss 0.00

    The Asus ASUS_X00LD_3 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15405Nov 14, 2019
    Asus
    ASUS_X00K_1
    risk 0.00cvss —epss 0.00

    The Asus ASUS_X00K_1 Android device with a build fingerprint of asus/CN_X00K/ASUS_X00K_1:7.0/NRD90M/CN_X00K-14.01.1711.27-20180420:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015,…

  • CVE-2019-15404Nov 14, 2019
    Asus
    ZenFone 3 Max
    risk 0.00cvss —epss 0.00

    The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1712.367-20171225:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15403Nov 14, 2019
    Asus
    ZenFone 3 Max
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15402Nov 14, 2019
    Asus
    ASUS_A002_2
    risk 0.00cvss —epss 0.00

    The Asus ASUS_A002_2 Android device with a build fingerprint of asus/WW_ASUS_A002_2/ASUS_A002_2:7.0/NRD90M/14.1610.1802.18-20180321:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15401Nov 14, 2019
    Asus
    ASUS_A002_2
    risk 0.00cvss —epss 0.00

    The Asus ASUS_A002 Android device with a build fingerprint of asus/WW_ASUS_A002/ASUS_A002:7.0/NRD90M/14.1600.1805.51-20180626:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020, versionName=7.0.0.4_170901)…

  • CVE-2019-15400Nov 14, 2019
    Asus
    ZenFone 3 Ultra
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3 Ultra Android device with a build fingerprint of asus/WW_Phone/ASUS_A001:7.0/NRD90M/14.1010.1804.75-20180612:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15399Nov 14, 2019
    Asus
    ZenFone 5Q
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 5Q Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_2:7.1.1/NGI77B/14.0400.1809.059-20181016:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15398Nov 14, 2019
    Asus
    ZenFone 4 Selfie
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Z01M/ASUS_Z01M_1:7.1.1/NMF26F/WW_user_11.40.208.77_20170922:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015,…

  • CVE-2019-15397Nov 14, 2019
    Asus
    ZenFone 3 Max
    risk 0.00cvss —epss 0.00

    The Asus ZenFone Max 4 Android device with a build fingerprint of asus/WW_Phone/ASUS_X00HD_4:7.1.1/NMF26F/14.2016.1803.373-20180308:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

  • CVE-2019-15396Nov 14, 2019
    Asus
    com.asus.loguploaderproxy
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3 Android device with a build fingerprint of asus/WW_Phone/ASUS_Z012D:7.0/NRD90M/14.2020.1708.56-20170719:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015, versionName=7.0.0.3_161222)…

  • CVE-2019-15395Nov 14, 2019
    Asus
    ZenFone 3 Max
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3s Max Android device with a build fingerprint of asus/IN_X00G/ASUS_X00G_1:7.0/NRD90M/IN_X00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000015,…

  • CVE-2019-15394Nov 14, 2019
    Asus
    ZenFone 4 Selfie
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 5 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X017D_1:7.1.1/NMF26F/14.0400.1810.061-20181107:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app (versionCode=1, versionName=1) that allows…

  • CVE-2019-15393Nov 14, 2019
    Asus
    com.asus.atd.smmitest
    risk 0.00cvss —epss 0.00

    The Asus ZenFone Live Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_3:7.1.1/NMF26F/14.0400.1806.203-20180720:user/release-keys contains a pre-installed app with a package name of com.asus.atd.smmitest app (versionCode=1, versionName=1) that allows…

  • CVE-2019-15392Nov 14, 2019
    Asus
    ZenFone 4 Selfie
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 4 Selfie Android device with a build fingerprint of Android/sdm660_64/sdm660_64:8.1.0/OPM1/14.2016.1802.247-20180419:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any app…

  • CVE-2019-15391Nov 14, 2019
    Asus
    ZenFone 4 Selfie
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 4 Selfie Android device with a build fingerprint of asus/WW_Phone/ASUS_X00LD_1:8.1.0/OPM1.171019.011/15.0400.1809.405-0:user/release-keys contains a pre-installed app with a package name of com.log.logservice app (versionCode=1, versionName=1) that allows any…

  • CVE-2019-15411Nov 14, 2019
    Asus
    com.asus.loguploaderproxy
    risk 0.00cvss —epss 0.00

    The Asus ZenFone 3 Laser Android device with a build fingerprint of asus/WW_msm8937/msm8937:7.1.1/NMF26F/WW_32.40.106.114_20180928:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app (versionCode=1570000020,…

Page 5 of 6