Vulnerabilities > Asus > RT Ac86U Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-07 | CVE-2023-39238 | Use of Externally-Controlled Format String vulnerability in Asus products It is identified a format string vulnerability in ASUS RT-AX56U V2. | 7.2 |
| 2023-09-07 | CVE-2023-39239 | Use of Externally-Controlled Format String vulnerability in Asus products It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. | 7.2 |
| 2023-09-07 | CVE-2023-39240 | Use of Externally-Controlled Format String vulnerability in Asus products It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. | 7.2 |
| 2023-09-07 | CVE-2023-38032 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.438651529 ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. | 8.8 |
| 2023-09-07 | CVE-2023-38033 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.438651529 ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. | 8.8 |
| 2023-09-07 | CVE-2023-39236 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.438651529 ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. | 8.8 |
| 2023-09-07 | CVE-2023-39237 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.438651529 ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. | 8.8 |
| 2023-09-07 | CVE-2023-38031 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.438651529 ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. | 8.8 |
| 2023-07-21 | CVE-2023-35086 | Use of Externally-Controlled Format String vulnerability in Asus Rt-Ac86U Firmware and Rt-Ax56U V2 Firmware It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. | 7.2 |
| 2023-06-02 | CVE-2023-28702 | OS Command Injection vulnerability in Asus Rt-Ac86U Firmware 3.0.0.4.386.51255 ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. | 8.8 |