FTC Dings ASUS For Selling 'Secure' Routers.

[L&LD]

Not trying to be mean but you're some random dude on the Internet. I'd be happy to prepare a shiny deck and PoC to give you a crash course on past CVEs, non-public vulns fixed without CVEs, walk through the exploits with step by step explanation, and also educate you on how the severity ratings were calculated. But you'd have to make it worth my time.

Or you can dig into the code or pay someone to do it for you. Whether the impacted code is open source or private, you should be able to read the dissaesembly. If you're incapable of doing this then I'd argue it's not my problem.

What exactly are you offering and for how much?

I would argue that you too were once incapable of digging through the code. If you're not willing to help directly, can you point to where this can be learned?

 

[jegesq]

L&LD: Here's something to get you started: https://cve.mitre.org/
and this: https://nvd.nist.gov/home.cfm
and this: https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
and this: https://danielmiessler.com/study/vulnerability-database-resources/