ASUS Rt-n10e vulnerabilities

2 CVEs affecting ASUS Rt-n10e, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-1354, published 2025-02-16.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-3610, published 2013-10-05. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. qis/QIS_finish.htm on the ASUS RT-N10E router with firmware before 2.0.0.25 does not require authentication, which allows remote attackers to discover the administrator password via a direct request.
• CVE-2025-1354, published 2025-02-16. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID…