ASUS Video Security Online vulnerabilities

2 CVEs affecting ASUS Video Security Online, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-3490, published 2005-11-04.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-3489, published 2005-11-04. High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days. Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string.
• CVE-2005-3490, published 2005-11-04. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or "..\" sequences in the URL.