asus rt-ac66u firmware

Name: asus rt-ac66u firmware
Brand: asus

productUS

cpe:2.3:o:asus:rt-ac66u_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

6critical3high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-4659US	critical9.8	13.9% (97th)	Exploit	no fix	2017-03-14	—
CVE-2013-6343US	high10.0	7.82% (95th)	Exploit	no fix	2014-01-22	= 3.0.0.4..374_979
CVE-2018-8879US	critical9.8	17.2% (97th)	—	3.0.0.4.382.50470	2019-11-21	< 3.0.0.4.382.50470
CVE-2018-8826US	critical9.8	4.19% (91st)	—	no fix	2018-04-20	= 3.0.0.4.380.8228
CVE-2018-9285US	critical9.8	3.56% (89th)	—	3.0.0.4.384.10007	2018-04-04	< 3.0.0.4.384.10007
CVE-2013-4656US	critical9.8	2.21% (82nd)	—	no fix	2019-11-13	—
CVE-2013-4937US	high10.0	1.87% (79th)	—	no fix	2013-07-26	6 versions
CVE-2014-2719US	medium6.3	1.13% (66th)	—	no fix	2014-04-22	6 versions
CVE-2021-43702US	critical9.0	0.98% (62nd)	—	no fix	2022-07-05	= 3.0.0.4.386.46061
CVE-2013-3093US	high8.8	0.74% (54th)	—	no fix	2020-01-28	= 3.0.0.4.374_2050
CVE-2020-7997US	medium6.1	0.70% (53rd)	—	no fix	2020-01-28	= 3.0.0.4.372_67

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.