CVE-2024-3080

—

CVSS 3.1

9.8 critical

EPSS

43%p99

Published

Jun 14, 2024 (Jun 14, 2024)

Modified

Jun 17, 2026

Description

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (43.5%)

In the news4 stories

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

The Hacker NewsOct 5, 04:36 UTC · Oct 5, 2024Vulnerability CVE-2024-3080 CVE-2024-47176

60

Cloudflare mitigated new record

Security AffairsOct 3, 13:01 UTC · Oct 3, 2024Vulnerability CVE-2024-3080

60

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

The Hacker NewsJun 21, 08:41 UTC · Jun 21, 2024Vulnerability CVE-2024-3080 CVE-2024-3079 CVE-2024-3912

60

ASUS fixed critical remote authentication bypass bug in several routers

Security AffairsJun 16, 07:47 UTC · Jun 16, 2024Vulnerability CVE-2024-3080 CVE-2024-3912

60