CVE-2024-3912

—

CVSS 3.1

9.8 critical

EPSS

1%p61

Published

Jun 14, 2024 (Jun 14, 2024)

Modified

Jun 17, 2026

Description

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news2 stories

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

The Hacker NewsJun 21, 08:41 UTC · Jun 21, 2024Vulnerability CVE-2024-3080 CVE-2024-3079 CVE-2024-3912

ASUS fixed critical remote authentication bypass bug in several routers

Security AffairsJun 16, 07:47 UTC · Jun 16, 2024Vulnerability CVE-2024-3080 CVE-2024-3912