ASUSTeK COMPUTER INC. vulnerabilities

Products

• ASUS Router RT-AX3000 1
• RT-AC87U 1

Latest ASUSTeK COMPUTER INC. CVEs

Newest publication first

1. CVE-2023-47678 An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.

   Published 2023-11-15

   Critical·CVSS 9.1 EPSS 0.75%

   An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp.

2. CVE-2023-31195 ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack,....

   Published 2023-06-13

   Medium·CVSS 5.3 EPSS 0.27%

   ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. When an attacker is in a position to be able to mount a man-in-the-middle attack, and a user is tricked to log into the affected device through an unencrypted ('h...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.