Login Request a demo
RF
Product
Rt-ac3200 Firmware
by Asus · last CVE Jul 5, 2022
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 1Medium 3Low 0
Severity
All severities7Critical3High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rt-ac3200 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-14714
9.8
27%
May 13
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter
Affected: 3.0.0.4.382.50010
CVE-2018-9285
9.8
4%
Apr 4
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices…
Affected: before 3.0.0.4.382.50010
CVE-2021-43702
9.0
1%
Jul 5
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS)
Affected: 3.0.0.4.386.46061
CVE-2018-14713
8.1
4%
May 13
Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL…
Affected: 3.0.0.4.382.50010
CVE-2018-14712
6.5
4%
May 13
Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter
Affected: 3.0.0.4.382.50010
CVE-2018-14711
6.5
1%
May 13
Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing actions with specially crafted…
Affected: 3.0.0.4.382.50010
CVE-2018-14710
6.1
5%
May 13
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter
Affected: 3.0.0.4.382.50010
Showing 7