ASUS RT-AX55

• CVE-2023-39780 High 8.8 Exploited On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" i 39.5%
• CVE-2024-11985 Medium 4.4 An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory 0.4%
• CVE-2024-0401 High 7.2 ASUS OVPN RCE 0.7%
• CVE-2023-41348 High 8.8 ASUS RT-AX55 - command injection - 4 1.7%
• CVE-2023-41347 High 8.8 ASUS RT-AX55 - command injection - 3 1.7%
• CVE-2023-41346 High 8.8 ASUS RT-AX55 - command injection - 2 1.6%
• CVE-2023-41345 High 8.8 ASUS RT-AX55 - command injection - 1 1.7%
• CVE-2023-39240 High 7.2 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3 1.3%
• CVE-2023-39239 High 7.2 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2 1.3%
• CVE-2023-39238 High 7.2 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1 1.4%
• CVE-2021-37910 Low 3.7 ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication 2.1%