ASUS Rt-AC66U Firmware vulnerabilities

11 CVEs affecting ASUS Rt-AC66U Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43702, published 2022-07-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-8879, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 17.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by…
CVE-2013-4659, published 2017-03-14. Critical severity, CVSS 9.8. EPSS: 13.9% chance of exploitation in the next 30 days. Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U…
CVE-2013-6343, published 2014-01-22. High severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days. Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2)…
CVE-2018-8826, published 2018-04-20. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before…
CVE-2018-9285, published 2018-04-04. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935;…
CVE-2013-4656, published 2019-11-13. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.
CVE-2013-4937, published 2013-07-26. High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have unknown impact and…
CVE-2014-2719, published 2014-04-22. Medium severity, CVSS 6.3. EPSS: 1.1% chance of exploitation in the next 30 days. Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator…
CVE-2021-43702, published 2022-07-05. Critical severity, CVSS 9.0. EPSS: 1% chance of exploitation in the next 30 days. ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the…
CVE-2013-3093, published 2020-01-28. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. ASUS RT-N56U devices allow CSRF.

Latest

CVE-2020-7997, published 2020-01-28. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.