asus

318 tracked vulnerabilities.

CVE-2025-9336 MEDIUM
ASUS Armoury Crate < 6.3.4 - Stack-based Buffer Overflow in AsIO3.sys Driver
Oct 13, 2025
EPSS 0.00
CVE-2025-9968 HIGH
Armoury Crate - Privilege Escalation
Oct 13, 2025
EPSS 0.00
CVE-2025-6398 MEDIUM
ASUS AI Suite 3 - Null Pointer Dereference
Aug 01, 2025
EPSS 0.00
CVE-2025-4570 MEDIUM
MyASUS - Use of Hard-coded Credentials
Jul 21, 2025
EPSS 0.00
CVE-2025-4569 HIGH
MyASUS - Use of Hard-coded Credentials
Jul 21, 2025
EPSS 0.00
CVE-2025-3464 HIGH
ASUS Armoury Crate 5.9.9.0-6.1.18 - Authentication Bypass via TOCTOU Race Condition
Jun 16, 2025
EPSS 0.00
CVE-2025-1533 HIGH
ASUS Armoury Crate < 6.1.13 - Stack-based Buffer Overflow in AsIO3.sys Driver
May 12, 2025
EPSS 0.00
CVE-2025-3463 CRITICAL
ASUS DriverHub - Improper Certificate Validation via Crafted HTTP Requests
May 09, 2025
EPSS 0.00
CVE-2025-3462 HIGH
ASUS DriverHub - Unauthorized Feature Interaction via Crafted HTTP Requests
May 09, 2025
EPSS 0.00
CVE-2025-2492 CRITICAL
ASUS Router AiCloud - Authentication Bypass via Crafted Request
Apr 18, 2025
EPSS 0.00
CVE-2025-2027 MEDIUM
ASUS System Analysis - Use After Free
Mar 28, 2025
EPSS 0.00
CVE-2025-1354 MEDIUM
ASUS RT-N10E and RT-N12E - Stored Cross-Site Scripting via SSID Parameter in sysinfo.asp
Feb 16, 2025
EPSS 0.00
CVE-2024-12957 HIGH
ASUS Armoury Crate 2.3.4.0-5.9.9.0 - Unauthenticated Arbitrary File Deletion
Jan 23, 2025
EPSS 0.00
CVE-2024-55408 MEDIUM
ASUS ASCI - Missing Authorization via Crafted IOCTL Requests
Jan 06, 2025
CVSS 5.3
EPSS 0.00
CVE-2024-13062 HIGH
ASUS Router 3.0.0.4_382-3.0.0.4_386-3.0.0.4_388-3.0.0.6_102 - OS Command Injection
Jan 02, 2025
CVSS 7.2
EPSS 0.00
CVE-2024-12912 HIGH
ASUS Router 3.0.0.4_382-3.0.0.6_102 - OS Command Injection in AiCloud
Jan 02, 2025
CVSS 7.2
EPSS 0.00
CVE-2024-11985 MEDIUM
ASUS RT-AX55 RT-AX56U RT-AX57 RT-AX58U - Denial of Service via Improper Input Validation
Dec 04, 2024
CVSS 4.4
EPSS 0.00
CVE-2024-3912 CRITICAL
ASUS Router - Remote Code Execution
Jun 14, 2024
CVSS 9.8
EPSS 0.04
CVE-2024-31163 HIGH
ASUS Download Master - Buffer Overflow
Jun 14, 2024
CVSS 7.2
EPSS 0.03
CVE-2024-31162 HIGH
ASUS Download Master < 3.1.0.113 - Unauthenticated OS Command Injection
Jun 14, 2024
CVSS 7.2
EPSS 0.01
CVE-2024-31161 HIGH
ASUS Download Master < 3.1.0.114 - Authenticated Arbitrary File Upload and Remote Code Execution
Jun 14, 2024
CVSS 7.2
EPSS 0.01
CVE-2024-31160 MEDIUM
ASUS Download Master < 3.1.0.114 - Authenticated Stored Cross-Site Scripting
Jun 14, 2024
CVSS 4.8
EPSS 0.00
CVE-2024-31159 MEDIUM
ASUS Download Master < 3.1.0.114 - Authenticated Reflected Cross-Site Scripting
Jun 14, 2024
CVSS 4.8
EPSS 0.00
CVE-2024-3080 CRITICAL NUCLEI
ASUS ZenWiFi XT8, XT8 V2, RT-AX88U, RT-AX58U, RT-AX57, RT-AC86U, RT-AC68U - Unauthenticated Authentication Bypass
Jun 14, 2024
CVSS 9.8
EPSS 0.55
CVE-2024-3079 HIGH
ASUS ZenWiFi XT8, XT8 V2, RT-AX88U, RT-AX58U, RT-AX57, RT-AC86U, RT-AC68U - Authenticated Stack-based Buffer Overflow
Jun 14, 2024
CVSS 7.2
EPSS 0.04
Products
asmb8-ikvm_firmware 19 rt-ac86u_firmware 19 z10pe-d16_ws_firmware 18 z10pr-d16_firmware 18 asmb9-ikvm_firmware 17 e700_g4_firmware 17 esc4000_dhd_g4_firmware 17 esc4000_g4_firmware 17 esc4000_g4x_firmware 17 esc8000_g4\/10g_firmware 17 esc8000_g4_firmware 17 knpa-u16_firmware 17 pro_e800_g4_firmware 17 rs100-e10-pi2_firmware 17 rs300-e10-ps4_firmware 17 rs300-e10-rs4_firmware 17 rs500-e9-ps4_firmware 17 rs500-e9-rs4-u_firmware 17 rs500-e9-rs4_firmware 17 rs500a-e10-ps4_firmware 17 rs500a-e10-rs4_firmware 17 rs500a-e9-ps4_firmware 17 rs500a-e9-rs4_firmware 17 rs500a-e9_rs4_u_firmware 17 rs520-e9-rs12-e_firmware 17 rs520-e9-rs8_firmware 17 rs700-e9-rs12_firmware 17 rs700-e9-rs4_firmware 17 rs700a-e9-rs12v2_firmware 17 rs700a-e9-rs4_firmware 17
Quick Filters
Critical CVEs With Exploits In CISA KEV