RT-AX55 vulnerabilities
9 known vulnerabilities in RT-AX55 from ASUS. 9 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
ExpertWiFi: Improper Neutralization of Special Elements used in an OS Command
ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS Expe
- 8.8 High severity
RT-AX55: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to e
- 8.8 High severity
RT-AX55: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute a
- 8.8 High severity
RT-AX55: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute
- 8.8 High severity
RT-AX55: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execu
- 8.8 High severity
ASUS RT-AX55 Routers OS Command Injection Exploited
On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh mod
- 7.2 High severity
RT-AX55: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_cli.cgi module. A remote attacker with administrator privilege can exp
- 7.2 High severity
RT-AX55: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific value within its apply.cgi module. A remote attacker with administrator privilege can exploit this vuln
- 7.2 High severity
RT-AX55: Use of Externally-Controlled Format String
It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to p