CVE-2019-11060

The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).

• CWE-400
• CWE-770

• http://surl.twcert.org.tw/aarVJThird Party Advisory
• https://tvn.twcert.org.tw/taiwanvn/TVN-201906002Third Party Advisory
• https://www.exploit-db.com/exploits/46720Not Applicable, Third Party Advisory, VDB Entry
• http://surl.twcert.org.tw/aarVJThird Party Advisory
• https://tvn.twcert.org.tw/taiwanvn/TVN-201906002Third Party Advisory
• https://www.exploit-db.com/exploits/46720Not Applicable, Third Party Advisory, VDB Entry

Published

Aug 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11049In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, whe…9.8
• CVE-2019-1105A spoofing vulnerability exists in the way Microsoft Outlook…
• CVE-2019-11050When PHP EXIF extension is parsing EXIF information from an …6.5
• CVE-2019-11057SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfi…8.8
• CVE-2019-11059Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 6…
• CVE-2019-1106A remote code execution vulnerability exists in the way that…
• CVE-2019-11061A broken access control vulnerability in HG100 firmware vers…10
• CVE-2019-11062The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS C…9.8
• CVE-2019-11063A broken access control vulnerability in SmartHome app (Andr…10
• CVE-2019-11064A vulnerability of remote credential disclosure was discover…9.8
• CVE-2019-11065Gradle versions from 1.4 to 5.3.1 use an insecure HTTP URL t…5.9
• CVE-2019-11066openid.php in LightOpenID through 1.3.1 allows SSRF via a cr…