ASUS Download Master vulnerabilities

5 CVEs affecting ASUS Download Master, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-31163, published 2024-06-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-31162, published 2024-06-14. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to…
CVE-2024-31163, published 2024-06-14. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privileges can exploit this vulnerability to execute arbitrary system commands on the…
CVE-2024-31161, published 2024-06-14. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location.…
CVE-2024-31160, published 2024-06-14. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for…
CVE-2024-31159, published 2024-06-14. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. The parameter used in the certain page of ASUS Download Master is not properly filtered for user input. A remote attacker with administrative privilege can insert JavaScript code to the parameter for…