asus rt-ax55 firmware

Name: asus rt-ax55 firmware
Brand: asus

productUS

cpe:2.3:o:asus:rt-ax55_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical7high1medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-39780US	high8.8OT critical	39.5% (99th)	KEV	no fix	2023-09-11	= 3.0.0.4.386.51598
CVE-2021-37910US	medium5.3	2.10% (82nd)	Exploit	3.0.0.4.386.45898	2021-11-12	< 3.0.0.4.386.45898
CVE-2021-41435US	critical9.8	6.49% (94th)	—	3.0.0.4.386.45898	2021-11-19	< 3.0.0.4.386.45898
CVE-2021-41436US	high7.5	4.95% (92nd)	—	3.0.0.4.386.45898	2021-11-19	< 3.0.0.4.386.45898
CVE-2021-3128US	high7.5	2.18% (82nd)	—	9.0.0.4.386.41994	2021-04-12	2 versions
CVE-2022-26376US	critical9.8	1.49% (74th)	—	3.0.0.4.386_49559	2022-08-05	< 3.0.0.4.386_49559
CVE-2023-39238US	—	1.36% (71st)	—	no fix	2023-09-07	= 3.0.0.4.386_50460
CVE-2023-41348US	high8.8	1.29% (70th)	—	no fix	2023-11-03	= 3.0.0.4.386.51598
CVE-2023-41347US	high8.8	1.29% (70th)	—	no fix	2023-11-03	= 3.0.0.4.386.51598
CVE-2023-41345US	high8.8	1.29% (70th)	—	no fix	2023-11-03	= 3.0.0.4.386.51598
CVE-2023-39240US	—	1.28% (70th)	—	no fix	2023-09-07	= 3.0.0.4.386_50460
CVE-2023-39239US	—	1.28% (70th)	—	no fix	2023-09-07	= 3.0.0.4.386_50460
CVE-2023-41346US	high8.8	1.20% (68th)	—	no fix	2023-11-03	= 3.0.0.4.386.51598
CVE-2021-43702US	critical9.0	0.98% (62nd)	—	no fix	2022-07-05	= 3.0.0.4.386.46061

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-134Use of Externally-Controlled Format String3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.