CVE-2024-3912

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.02% chance of exploitation in the next 30 days, 61th percentile

Published

2024-06-14

Updated

2024-08-01

Proof-of-concept exploits (1)

• H4rk3nz0/CVE-2024-3912

References

• CVE Record
• NVD entry

Related

• CVE-2023-20598
• CVE-2024-39119
• CVE-2024-39123
• CVE-2024-3910
• CVE-2024-39133
• CVE-2024-39097