CVE-2024-3079

EUVD-2024-31685
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
asusrt-ax58u_firmware
𝑥
< 3.0.0.4.388_24762
ADP
asusrt-ax88u_firmware
𝑥
< 3.0.0.4.388_24209
ADP
asusrt-ax57_firmware
𝑥
< 3.0.0.4.386_52294
ADP
asusrt-ac86u_firmware
𝑥
< 3.0.0.4.386_51915
ADP
asusrt-ac68u_firmware
𝑥
< 3.0.0.4.386_51668
ADP
asuszenwifi_xt8_firmware
𝑥
< 3.0.0.4.388_24609
ADP
asuszenwifi_xt8_v2_firmware
𝑥
< 3.0.0.4.388_24609
ADP
Common Weakness Enumeration
References
https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html
https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.html
https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html
https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.html