ASUS Rt-AC68U Firmware vulnerabilities

16 CVEs affecting ASUS Rt-AC68U Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3080, published 2024-06-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3080, published 2024-06-14. Critical severity, CVSS 9.8. EPSS: 43.5% chance of exploitation in the next 30 days. Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.
CVE-2013-5948, published 2014-04-22. High severity, CVSS 8.5. EPSS: 9.4% chance of exploitation in the next 30 days. The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary…
CVE-2018-9285, published 2018-04-04. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935;…
CVE-2021-3128, published 2021-04-12. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive…
CVE-2014-7269, published 2015-02-01. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier,…
CVE-2021-37317, published 2023-02-03. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the…
CVE-2021-45756, published 2022-03-23. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi.
CVE-2014-2925, published 2014-04-22. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject…
CVE-2014-2719, published 2014-04-22. Medium severity, CVSS 6.3. EPSS: 1.1% chance of exploitation in the next 30 days. Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator…
CVE-2021-37315, published 2023-02-03. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on…

Latest

CVE-2024-3079, published 2024-06-14. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
CVE-2021-37316, published 2023-02-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow.
CVE-2021-43702, published 2022-07-05. Critical severity, CVSS 9.0. EPSS: 1% chance of exploitation in the next 30 days. ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the…
CVE-2021-45757, published 2022-03-23. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS).
CVE-2018-0582, published 2018-05-14. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.