Log in Start free

Vulnerability · Published Jun 14, 2024 · Assigned by twcert

CVE-2024-3912ASUS Router - Upload arbitrary firmware

Critical 9.8

In plain English

A critical-severity unrestricted file upload in DSL-AC51 from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.0%top 36.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

Affected products (as reported)

VendorProductVersions
ASUS DSL-N17U earlier – before 1.1.2.3_792
ASUS DSL-N55U_C1 earlier – before 1.1.2.3_792
ASUS DSL-N55U_D1 earlier – before 1.1.2.3_792
ASUS DSL-N66U earlier – before 1.1.2.3_792
ASUS DSL-N12U_C1 earlier – before 1.1.2.3_807
ASUS DSL-N12U_D1 earlier – before 1.1.2.3_807
ASUS DSL-N14U earlier – before 1.1.2.3_807
ASUS DSL-N14U_B1 earlier – before 1.1.2.3_807
ASUS DSL-N16 earlier – before 1.1.2.3_999
ASUS DSL-AC51 earlier – before 1.1.2.3_999
ASUS DSL-AC750 earlier – before 1.1.2.3_999
ASUS DSL-AC52U earlier – before 1.1.2.3_999
ASUS DSL-AC55U earlier – before 1.1.2.3_999
ASUS DSL-AC56U earlier – before 1.1.2.3_999
ASUS DSL-N10_C1 All
ASUS DSL-N10_D1 All
ASUS DSL-N10P_C1 All
ASUS DSL-N12E_C1 All
ASUS DSL-N16P All
ASUS DSL-N16U All
ASUS DSL-AC52 All
ASUS DSL-AC55 All

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References