ASUS Gt-AX11000 Firmware vulnerabilities

3 CVEs affecting ASUS Gt-AX11000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26376, published 2022-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-41435, published 2021-11-19. Critical severity, CVSS 9.8. EPSS: 6.5% chance of exploitation in the next 30 days. A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86…
CVE-2021-41436, published 2021-11-19. High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days. An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S),…
CVE-2022-26376, published 2022-08-05. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can…