ASUS Gt-AC5300 Firmware vulnerabilities

5 CVEs affecting ASUS Gt-AC5300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-17127, published 2018-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-17022, published 2018-09-13. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact by…
CVE-2018-17020, published 2018-09-13. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" line.
CVE-2018-17127, published 2018-09-17. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a…
CVE-2018-17021, published 2018-09-13. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook…
CVE-2018-17023, published 2018-09-13. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack the authentication of administrators for requests…