CVE-2021-37315

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

1.11% chance of exploitation in the next 30 days, 64th percentile

Published

2023-02-03

Updated

2025-03-26

Proof-of-concept exploits (1)

• https://robertchen.cc/blog/2021/03/31/asus-rce

References

• CVE Record
• NVD entry

Related

• CVE-2021-37305
• CVE-2021-37316
• CVE-2021-37304
• CVE-2021-37317
• CVE-2021-37292
• CVE-2021-37322