Hg100 Firmware

hg100_firmware

Vendor: Asus • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-15912 1Asus 7As 101 Firmware Dl 101 FirmwareHg100 Firmware+4 more Nov 21, 2024 Dec 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.
CVE-2019-15911 1Asus 7As 101 Firmware Dl 101 FirmwareHg100 Firmware+4 more Nov 21, 2024 Dec 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause...Show more An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and tamper with messages.Show less
CVE-2019-15910 1Asus 7As 101 Firmware Dl 101 FirmwareHg100 Firmware+4 more Nov 21, 2024 Dec 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack.
CVE-2019-11061 1Asus 1Hg100 Firmware Nov 21, 2024 Aug 29, 2019 N/A· v4 8.1 HIGH· v3 4.8 MEDIUM· v2 A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol...Show more A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).Show less
CVE-2019-11060 1Asus 1Hg100 Firmware Nov 21, 2024 Aug 29, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP o...Show more The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).Show less
CVE-2018-11492 1Asus 1Hg100 Firmware Nov 21, 2024 Aug 10, 2018 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 ASUS HG100 devices allow denial of service via an IPv4 packet flood.
CVE-2018-11491 1Asus 1Hg100 Firmware Nov 21, 2024 Jul 25, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.