Paper/Archive/CVE-2024-3080

CVE-2024-3080

ASUS ZenWiFi XT8 — ASUS Router - Improper Authentication

Description · from the CVE record

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

Affected

ProductAffectedFixed inSource

ZenWiFi XT8earlier – 3.0.0.4.388_24609–CNA

ZenWiFi XT8 V2earlier – 3.0.0.4.388_24609–CNA

RT-AX88Uearlier – 3.0.0.4.388_24198–CNA

RT-AX58Uearlier – 3.0.0.4.388_23925–CNA

RT-AX57earlier – 3.0.0.4.386_52294–CNA

RT-AC86Uearlier – 3.0.0.4.386_51915–CNA

RT-AC68Uearlier – 3.0.0.4.386_51668–CNA

rt-ax58u_firmware< 3.0.0.4.388_247623.0.0.4.388_24762CISA-ADP

rt-ax88u_firmware< 3.0.0.4.388_242093.0.0.4.388_24209CISA-ADP

rt-ax57_firmware< 3.0.0.4.386_522943.0.0.4.386_52294CISA-ADP

rt-ac86u_firmware< 3.0.0.4.386_519153.0.0.4.386_51915CISA-ADP

rt-ac68u_firmware< 3.0.0.4.386_516683.0.0.4.386_51668CISA-ADP

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total