Asus vulnerabilities2 known to be exploited.
Asus has 273 published vulnerabilities across 922 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Rt-Ac86u, with 22. If you run Asus software, patch the exploited flaws first.
The most recent Asus flaw added to the known-exploited list is CVE-2021-32030, on 2 June 2025. We keep watching the known-exploited list.
Which Asus products have the most vulnerabilities?
Rt-Ac86u leads with 22 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Asus vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8ASUS Routers Improper Authentication Vulnerability
ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface.
- 8.8ASUS RT-AX55 Routers OS Command Injection Vulnerability
ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands.
Which Asus flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading...
- 87%CVE-2018-5999Critical
An issue was discovered in AsusWRT before 3.0.0.4.384_10007.
- 85%CVE-2018-6000Critical
An issue was discovered in AsusWRT before 3.0.0.4.384_10007.
- 70%CVE-2008-1491Critical
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
- 40%
On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter.
- 39%CVE-2023-35086High
It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U.
- 36%CVE-2012-4924Critical
Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
- 27%CVE-2018-14714Critical
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.
- 24%CVE-2023-34941Medium
A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL...
All Asus products we track.
223 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Asmb8-Ikvm Firmwareasmb8-ikvm_firmware19 vulnerabilities1 version
- Rt-Ac86u Firmwarert-ac86u_firmware19 vulnerabilities5 versions
- Z10pe-D16 Ws Firmwarez10pe-d16_ws_firmware18 vulnerabilities1 version
- Z10pr-D16 Firmwarez10pr-d16_firmware18 vulnerabilities1 version
- Asmb9-Ikvm Firmwareasmb9-ikvm_firmware17 vulnerabilities1 version
- E700 G4 Firmwaree700_g4_firmware17 vulnerabilities1 version
- Esc4000 Dhd G4 Firmwareesc4000_dhd_g4_firmware17 vulnerabilities1 version
- Esc4000 G4 Firmwareesc4000_g4_firmware17 vulnerabilities1 version
- Esc4000 G4x Firmwareesc4000_g4x_firmware17 vulnerabilities1 version
- Esc8000 G4 Firmwareesc8000_g4_firmware17 vulnerabilities1 version
- Esc8000 G4/10g Firmwareesc8000_g4\/10g_firmware17 vulnerabilities1 version
- Knpa-U16 Firmwareknpa-u16_firmware17 vulnerabilities1 version
- Pro E800 G4 Firmwarepro_e800_g4_firmware17 vulnerabilities1 version
- Rs100-E10-Pi2 Firmwarers100-e10-pi2_firmware17 vulnerabilities1 version
- Rs300-E10-Ps4 Firmwarers300-e10-ps4_firmware17 vulnerabilities1 version
- Rs300-E10-Rs4 Firmwarers300-e10-rs4_firmware17 vulnerabilities1 version
- Rs500-E9-Ps4 Firmwarers500-e9-ps4_firmware17 vulnerabilities1 version
- Rs500-E9-Rs4 Firmwarers500-e9-rs4_firmware17 vulnerabilities1 version
- Rs500-E9-Rs4-U Firmwarers500-e9-rs4-u_firmware17 vulnerabilities1 version
- Rs500a-E10-Ps4 Firmwarers500a-e10-ps4_firmware17 vulnerabilities1 version
- Rs500a-E10-Rs4 Firmwarers500a-e10-rs4_firmware17 vulnerabilities1 version
- Rs500a-E9 Rs4 U Firmwarers500a-e9_rs4_u_firmware17 vulnerabilities1 version
- Rs500a-E9-Ps4 Firmwarers500a-e9-ps4_firmware17 vulnerabilities1 version
- Rs500a-E9-Rs4 Firmwarers500a-e9-rs4_firmware17 vulnerabilities1 version
This directory lists the 223 Asus products with at least one tracked version, of 922 in our catalogue.
Running Asus? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
- Matched to
- Gt-Ac2900 on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 273 published vulnerabilities across 922 products and 488 versions from Asus. The most recent Asus flaw added to the known-exploited list is CVE-2021-32030, on 2 June 2025.
2 Asus vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2021-32030 and CVE-2023-39780. The full list is on this page.
Rt-Ac86u, with 22 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Asus products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.