ASUS Rt-n56u Firmware vulnerabilities

9 CVEs affecting ASUS Rt-n56u Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3093, published 2020-01-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6343, published 2014-01-22. High severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days. Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2)…
CVE-2013-4656, published 2019-11-13. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service.
CVE-2014-7269, published 2015-02-01. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier,…
CVE-2013-4937, published 2013-07-26. High severity, CVSS 10.0. EPSS: 1.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have unknown impact and…
CVE-2014-2719, published 2014-04-22. Medium severity, CVSS 6.3. EPSS: 1.1% chance of exploitation in the next 30 days. Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator…
CVE-2013-3093, published 2020-01-28. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. ASUS RT-N56U devices allow CSRF.
CVE-2014-7270, published 2015-02-01. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S…
CVE-2017-5632, published 2017-01-30. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of an affected device, one can crash the…
CVE-2011-4497, published 2011-11-21. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. QIS_wizard.htm on the ASUS RT-N56U router with firmware before 1.0.1.4o allows remote attackers to obtain the administrator password via a flag=detect request.