ASUS Asuswrt vulnerabilities

10 CVEs affecting ASUS Asuswrt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26376, published 2022-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-5999, published 2018-01-22. Critical severity, CVSS 9.8. EPSS: 87.3% chance of exploitation in the next 30 days. An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.
CVE-2018-6000, published 2018-01-22. Critical severity, CVSS 9.8. EPSS: 85.2% chance of exploitation in the next 30 days. An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which…
CVE-2018-20334, published 2020-03-20. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using…
CVE-2017-15655, published 2018-01-31. Critical severity, CVSS 9.6. EPSS: 3.1% chance of exploitation in the next 30 days. Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously…
CVE-2017-15654, published 2018-01-31. High severity, CVSS 8.3. EPSS: 2.1% chance of exploitation in the next 30 days. Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access.
CVE-2017-15653, published 2018-01-31. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing…
CVE-2017-15656, published 2018-01-31. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.
CVE-2022-26376, published 2022-08-05. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can…
CVE-2018-20335, published 2020-03-20. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.
CVE-2018-20333, published 2020-03-20. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the…