Sploitus

6 exploited vulnerabilities in Asuswrt-Merlin

Vulnerabilities with publicly known exploits

Vendors
Asus
With known exploits
6
Affected Asus rt-ac53 Firmware versions
= 3.0.0.4.380.6038
Affected Asus Asus Firmware versions
< 3.0.0.4.382.50470

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2017-6548 3 exploits
CVSS 10.0 CRITICAL 2017-03-08FIX AVAILABLE
ASUSWRT - Multiple VulnerabilitiesASUSWRT RT-AC53 (3.0.0.4.380.6038) - Remote Code Execution
CVE-2017-11420
CVSS 10.0 CRITICAL 2017-07-13
CVE-2018-8879
CVSS 9.8 CRITICAL 2019-11-21FIX AVAILABLE
CVE-2017-6549 5 exploits
CVSS 9.3 HIGH 2017-03-09FIX AVAILABLE
Asus_DeleteOfflineClientOverflowASUS WRT Session Hijacking Nmap NSE Script
CVE-2018-8878
CVSS 5.3 MEDIUM 2020-02-27FIX AVAILABLE
CVE-2018-8877
CVSS 5.3 MEDIUM 2020-02-27FIX AVAILABLE