Vulnerabilidades em Asus
186 resultadosAnálise Vexday
A Asus apresenta 4 vulnerabilidades catalogadas, sendo 2 críticas, porém nenhuma sob ataque ativo no momento. A fraqueza dominante é CWE-119 (estouro de buffer), padrão em produtos embarcados, com risco estabilizado dado que nenhuma foi publicada nos últimos 90 dias.
CVE-2024-31161HIGHASUS Download Master - Arbitrary File UploadEPSS 0.5%CVE-2025-3462HIGH"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASEPSS 0.5%CVE-2026-11851MEDIUMImproper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router EPSS 0.5%CVE-2022-23972HIGHASUS RT-AX56U - SQL InjectionEPSS 0.5%CVE-2025-59369MEDIUMA SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentiallEPSS 0.5%CVE-2023-34360HIGHASUS RT-AX88U - Stored XSSEPSS 0.5%CVE-2025-1354MEDIUMA cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validatioEPSS 0.5%CVE-2022-22054MEDIUMASUS RT-AX56U - Path TraversalEPSS 0.5%CVE-2022-23970HIGHASUS RT-AX56U - Path TraversalEPSS 0.5%CVE-2022-23971HIGHASUS RT-AX56U - Path TraversalEPSS 0.5%CVE-2025-59365MEDIUMA stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigger this vulnerabilityEPSS 0.4%CVE-2026-8919HIGHPermissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by coEPSS 0.4%CVE-2026-12962MEDIUMA Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash byEPSS 0.4%CVE-2025-4570MEDIUMAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used toEPSS 0.4%CVE-2025-4569HIGHAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used toEPSS 0.4%CVE-2025-59368MEDIUMAn integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a craEPSS 0.4%CVE-2022-25595MEDIUMASUS RT-AC86U - Improper Input ValidationEPSS 0.4%CVE-2024-11985MEDIUMAn improper input validation vulnerability leads to device crashes in certain ASUS router models.
Refer to the '12/03/2024 ASUS Router ImprEPSS 0.4%CVE-2026-84730HIGHStack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with rooEPSS 0.3%CVE-2026-75754CRITICALMissing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center aEPSS 0.3%