[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2FOFtIXsHj9N5qqXu9Q0352xL-JbXXr6pe0H9tk91CE":3,"g5a-family:asus\u002Frt-ax55":99,"g5a-ex:asus\u002Frt-ax55@*":102},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":71,"seoMetadata":77,"meta":96},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"asus","rt-ax55",0,14,1,"2023-11-03",[],"Rt-ax55 by Asus is a technology product and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,38,43,50,55,61,65,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2023-39780","On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the \u002Fstart_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.","2023-09-11",8.8,"v3.1","High",0.39514,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2021-41435","A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.","2021-11-19",9.8,"Critical",false,0.06491,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":37},"CVE-2021-41436","An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.",7.5,0.04952,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":36,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":42},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",0.02184,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":22,"severity":48,"isKev":31,"epssScore":49},"CVE-2021-37910","ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.","2021-11-12",5.3,"Medium",0.02099,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":54},"CVE-2022-26376","A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.","2022-08-05",0.01412,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":60},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n","2023-09-07",7.2,0.01356,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":64},"CVE-2023-41348","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",0.01288,{"cveId":66,"description":67,"publishedDate":12,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":64},"CVE-2023-41345","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.",{"cveId":69,"description":70,"publishedDate":12,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":64},"CVE-2023-41347","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",[72],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":73,"cisaDateAdded":74,"cisaShortDescription":75,"cisaRequiredAction":76},"ASUS RT-AX55 Routers OS Command Injection Vulnerability","2025-06-02","ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":78,"metaDescription":79,"keywords":80,"structuredData":81},"Rt-ax55 by Asus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rt-ax55 by Asus with 14 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ax55 vulnerabilities, Rt-ax55 security, Rt-ax55 CVE, Asus Rt-ax55, Rt-ax55 threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Rt-ax55 KEV, Rt-ax55 exploited vulnerabilities",{"@context":82,"@type":83,"name":84,"description":79,"url":85,"manufacturer":86,"applicationCategory":90,"softwareVersion":91,"mainEntity":92},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ax55","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ax55",{"@type":87,"name":88,"url":89},"Organization","Asus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasus","Security Software","Multiple versions",{"@type":93,"name":94,"description":95,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rt-ax55 Security Vulnerabilities","Security vulnerabilities affecting Rt-ax55 by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":97,"apiVersion":98},"2026-10-18T23:53:18.153Z","3.0",[100],{"product":101,"cves":10},"rt-ax55_firmware",{"rows":103,"total":11,"capped":31,"failed":9},[104],{"cveId":18,"name":73,"severity":23,"cvss":21,"added":74,"epss":24,"published":105,"ranges":106,"checked":4,"hits":107,"covers":31},"2023-09-11T19:15:43.19",[],[]]