CVE Tools
Track your stack

Asuswrt-merlin

2 CVEs tracked since 2020. Since Feb 2020, none of them reached CISA KEV.

Asuswrt-merlin CVEs per month

Feb 2020 to Feb 2020. Point at a month, or focus the strip and use the arrow keys.
Asuswrt-merlin CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0220

Products

The products that kept showing up in Asuswrt-merlin's monthly top three, with their CVEs summed over those months.

  1. Asuswrt-merlin21 month

Latest CVEs

The 5 most recently published vulnerabilities affecting Asuswrt-merlin.

  1. CVE-2022-26376A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can l...9.8
  2. CVE-2018-8878Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal...5.3
  3. CVE-2018-8877Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal...5.3
  4. CVE-2018-5721Stack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS routers (when using software from https://github.com/RMerl/asuswrt-merlin) allows web authenticated att...8.8
  5. CVE-2017-12754Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT...8.8

The record

Peak rank
#143 in Feb 2020
Busiest month shown
Feb 2020, 2 CVEs
Months with a KEV entry
0 since Feb 2020
Monthly snapshots
1 since 2020
Asuswrt-merlin's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store