HIGH-SEVERITY VULNERABILITIES AFFECT A WIDE RANGE OF ASUS ROUTER MODELS

Summary from the TLDR InfoSec newsletter

Asus has released updates patching multiple critical vulnerabilities in its routers. The first is an authentication bypass that allows remote attackers to log into the router with no authentication. The second vulnerability is a buffer overflow that could allow attackers with administrative access to execute arbitrary commands. The third vulnerability allows attackers to execute remote commands with no user interaction. Asus hasn't seen any exploitation of these vulnerabilities.