[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE_0SbTA_vOEYpXgf3LNMXCWtyb8-FycKDsDa1RyFgI8":3,"g5a-family:asus\u002Frt-ax55_firmware":114,"g5a-ex:asus\u002Frt-ax55_firmware@*":115},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":86,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"asus","rt-ax55_firmware",4,14,1,"2023-11-03",[14,18,20,23],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"3.0.0.4.386.46061",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.0.4.386_49559",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"3.0.0.4.386_50460",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},"3.0.0.4.386.51598",5,"Rt-ax55 Firmware by Asus is a technology product with 4 tracked versions and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},[33,41,48,53,58,65,70,76,80,83],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2023-39780","On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the \u002Fstart_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.","2023-09-11",8.8,"v3.1","High",0.39514,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":47},"CVE-2021-41435","A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.","2021-11-19",9.8,"Critical",0.06491,{"cveId":49,"description":50,"publishedDate":44,"cvssScore":51,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":52},"CVE-2021-41436","An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.",7.5,0.04952,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":51,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":57},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",0.02184,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":38,"severity":63,"isKev":17,"epssScore":64},"CVE-2021-37910","ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.","2021-11-12",5.3,"Medium",0.02099,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":69},"CVE-2022-26376","A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.","2022-08-05",0.01412,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":75},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n","2023-09-07",7.2,0.01356,{"cveId":77,"description":78,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":79},"CVE-2023-41348","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",0.01288,{"cveId":81,"description":82,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":79},"CVE-2023-41345","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.",{"cveId":84,"description":85,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":79},"CVE-2023-41347","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",[87],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":91},"ASUS RT-AX55 Routers OS Command Injection Vulnerability","2025-06-02","ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Rt-ax55 Firmware by Asus - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Rt-ax55 Firmware by Asus covering 4 versions with 14 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ax55 Firmware vulnerabilities, Rt-ax55 Firmware security, Rt-ax55 Firmware CVE, Asus Rt-ax55 Firmware, Rt-ax55 Firmware threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Rt-ax55 Firmware KEV, Rt-ax55 Firmware exploited vulnerabilities",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ax55 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ax55_firmware",{"@type":102,"name":103,"url":104},"Organization","Asus","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fasus","Security Software","4 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rt-ax55 Firmware Security Vulnerabilities","Security vulnerabilities affecting Rt-ax55 Firmware by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-19T01:11:21.968Z","3.0",[],{"rows":116,"total":11,"capped":17,"failed":16},[117],{"cveId":34,"name":88,"severity":39,"cvss":37,"added":89,"epss":40,"published":118,"ranges":119,"checked":4,"hits":120,"covers":17},"2023-09-11T19:15:43.19",[24],[]]