CVE-2024-3912

ASUS Router - Upload arbitrary firmware

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

Affected

ASUS · DSL-N17U · DSL-N55U_C1 · DSL-N55U_D1 · DSL-N66U · DSL-N12U_C1 · DSL-N12U_D1

CVSS v3.1 CERT

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.02% chance of exploitation in the next 30 days, 63rd percentile

Published

2024-06-14

Updated

2024-08-01

Proof-of-concept exploits (1)

• H4rk3nz0/CVE-2024-39120★ · 2026-03-06

References

• CVE Record
• NVD entry

Related

• CVE-2023-20598