RT-AC86U vulnerabilities
14 known vulnerabilities in RT-AC86U from ASUS. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
ZenWiFi XT8: Stack-based Buffer Overflow
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
- 7.2 High severity
ExpertWiFi: Improper Neutralization of Special Elements used in an OS Command
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS Expe
- 7.2 High severity
RT-AX55: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vuln
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt sys
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, dis
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt syste
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or
- 9.8 Critical severity
RT-AX56U V2: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking validation for a specific value when calling cm_processChangedConfigMsg in ccm_processREQ_CHANGED_CONFIG function in AiMesh system. An unauth
- 7.2 High severity
RT-AX56U V2: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly using input as a format string when calling syslog in logmessage_normal function, in the do_detwan_cgi module of httpd. A remote attacker wi
- 7.2 High severity
RT-AC86U: Stack-based Buffer Overflow
ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary system co
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or termi
- 8.8 High severity
RT-AC86U: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.
- 8.8 High severity
RT-AC86U: Out-of-bounds Write
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and d