Vulnerability · Published Jun 14, 2024 · Assigned by twcert
CVE-2024-3079ASUS Router - Stack-based Buffer Overflow
High 7.2
In plain English
A high-severity stack buffer overflow in RT-AC68U from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.8%top 42.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ASUS | ZenWiFi XT8 | earlier – through 3.0.0.4.388_24609 |
| ASUS | ZenWiFi XT8 V2 | earlier – through 3.0.0.4.388_24609 |
| ASUS | RT-AX88U | earlier – through 3.0.0.4.388_24198 |
| ASUS | RT-AX58U | earlier – through 3.0.0.4.388_23925 |
| ASUS | RT-AX57 | earlier – through 3.0.0.4.386_52294 |
| ASUS | RT-AC86U | earlier – through 3.0.0.4.386_51915 |
| ASUS | RT-AC68U | earlier – through 3.0.0.4.386_51668 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html third-party-advisory