ASUS Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with RT-AX58U.

Products

Clear product

Showing 5 vulnerabilities on this page for RT-AX58U

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.

CWE-20Dec 4, 2024
CVSS4.4v3.1EPSS0.346%PoCs0SignalsSTIX

ASUS Router - Improper Authentication

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

CWE-287Jun 14, 20241 related artifact
CVSS9.8v3.1EPSS43.5%PoCs0SignalsSTIX

ASUS Router - Stack-based Buffer Overflow

Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.

CWE-121Jun 14, 2024
CVSS7.2v3.1EPSS0.826%PoCs0SignalsSTIX

ASUS OVPN RCE

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

CWE-78May 20, 2024
CVSS7.2v3.1EPSS0.735%PoCs0SignalsSTIX

ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.

CWE-799Nov 12, 2021
CVSS3.7v3.1EPSS2.07%PoCs1SignalsSTIX