RF
Product
Rt-ax55 Firmware
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 10Medium 1Low 0
Watch
Add Rt-ax55 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39780 In wildKEV | 8.8 | Sep 11 | ASUS RT-AX55 Routers OS Command Injection Vulnerability Affected: 3.0.0.4.386.51598 |
| CVE-2022-26376 | 9.8 | Aug 5 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7 Affected: before 3.0.0.4.386_49559 |
| CVE-2021-41435 | 9.8 | Nov 19 | A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION,… Affected: before 3.0.0.4.386.45898 |
| CVE-2021-43702 | 9.0 | Jul 5 | ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS) Affected: 3.0.0.4.386.46061 |
| CVE-2023-41348 | 8.8 | Nov 3 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module Affected: 3.0.0.4.386.51598 |
| CVE-2023-41347 | 8.8 | Nov 3 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module Affected: 3.0.0.4.386.51598 |
| CVE-2023-41346 | 8.8 | Nov 3 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module Affected: 3.0.0.4.386.51598 |
| CVE-2023-41345 | 8.8 | Nov 3 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module Affected: 3.0.0.4.386.51598 |
| CVE-2021-41436 | 7.5 | Nov 19 | An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86… Affected: before 3.0.0.4.386.45898 |
| CVE-2021-3128 | 7.5 | Apr 12 | In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that… Affected: before 3.0.0.4.386.42095; before 9.0.0.4.386.41994 |
| CVE-2023-39240 | 7.2 | Sep 7 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API Affected: 3.0.0.4.386_50460 |
| CVE-2023-39239 | 7.2 | Sep 7 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API Affected: 3.0.0.4.386_50460 |
| CVE-2023-39238 | 7.2 | Sep 7 | It is identified a format string vulnerability in ASUS RT-AX56U V2 Affected: 3.0.0.4.386_50460 |
| CVE-2021-37910 | 5.3 | Nov 12 | ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect… Affected: before 3.0.0.4.386.45898 |
Showing 14