[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE_0SbTA_vOEYpXgf3LNMXCWtyb8-FycKDsDa1RyFgI8":3,"g5a-family:asus\u002Frt-ax55_firmware":113,"g5a-ex:asus\u002Frt-ax55_firmware@*":114},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":85,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"asus","rt-ax55_firmware",4,14,1,"2023-11-03",[14,18,20,23],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"3.0.0.4.386.46061",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.0.4.386_49559",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"3.0.0.4.386_50460",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},"3.0.0.4.386.51598",5,"Rt-ax55 Firmware by Asus is a technology product with 4 tracked versions and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":4},[33,41,48,53,60,65,69,72,75,79],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2023-39780","On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the \u002Fstart_apply.htm qos_bw_rulelist parameter. NOTE: for the similar \"token-generated module\" issue, see CVE-2023-41345; for the similar \"token-refresh module\" issue, see CVE-2023-41346; for the similar \"check token module\" issue, see CVE-2023-41347; and for the similar \"code-authentication module\" issue, see CVE-2023-41348.","2023-09-11",8.8,"v3.1","High",0.32943,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":47},"CVE-2021-41435","A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.","2021-11-19",9.8,"Critical",0.05994,{"cveId":49,"description":50,"publishedDate":44,"cvssScore":51,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":52},"CVE-2021-41436","An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U\u002FRT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.",7.5,0.0457,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":38,"severity":58,"isKev":17,"epssScore":59},"CVE-2021-37910","ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.","2021-11-12",5.3,"Medium",0.02379,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":51,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":64},"CVE-2021-3128","In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware \u003C 3.0.0.4.386.42095 or \u003C 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.","2021-04-12",0.02184,{"cveId":66,"description":67,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":68},"CVE-2023-41348","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",0.01288,{"cveId":70,"description":71,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":68},"CVE-2023-41345","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.",{"cveId":73,"description":74,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":68},"CVE-2023-41347","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",{"cveId":76,"description":77,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":78},"CVE-2023-41346","ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.",0.01202,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":84},"CVE-2023-39238","\nIt is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_iperf3_svr.cgi module. A remote attacker with administrator privilege can exploit this vulnerability to perform remote arbitrary code execution, arbitrary system operation or disrupt service.\n\n","2023-09-07",7.2,0.01187,[86],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":87,"cisaDateAdded":88,"cisaShortDescription":89,"cisaRequiredAction":90},"ASUS RT-AX55 Routers OS Command Injection Vulnerability","2025-06-02","ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Rt-ax55 Firmware by Asus - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rt-ax55 Firmware by Asus covering 4 versions with 14 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Rt-ax55 Firmware vulnerabilities, Rt-ax55 Firmware security, Rt-ax55 Firmware CVE, Asus Rt-ax55 Firmware, Rt-ax55 Firmware threat intelligence, Asus security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Rt-ax55 Firmware KEV, Rt-ax55 Firmware exploited vulnerabilities",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","Rt-ax55 Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fasus\u002Frt-ax55_firmware",{"@type":101,"name":102,"url":103},"Organization","Asus","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fasus","Security Software","4 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rt-ax55 Firmware Security Vulnerabilities","Security vulnerabilities affecting Rt-ax55 Firmware by Asus",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-28T19:02:38.809Z","3.0",[],{"rows":115,"total":11,"capped":17,"failed":16},[116],{"cveId":34,"name":87,"severity":39,"cvss":37,"added":88,"epss":40,"published":117,"ranges":118,"checked":4,"hits":119,"covers":17},"2023-09-11T19:15:43.19",[24],[]]