CVE-2021-37910: ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication
ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-37910?
CVE-2021-37910 is a vulnerability in ASUS routers' Wi-Fi protected access protocol (WPA2 and WPA3-SAE) that allows an unauthenticated attacker to remotely disconnect other users' connections.
Which ASUS routers are affected by CVE-2021-37910?
ASUS GT-AXE11000 firmware up to version 3.0.0.4.386.45898 and ASUS RT-AX3000 firmware up to version 3.0.0.4.386.45898 are affected by CVE-2021-37910.
How severe is CVE-2021-37910?
CVE-2021-37910 has a severity score of 5.3, which is considered medium.
How can an attacker exploit CVE-2021-37910?
An unauthenticated attacker can exploit CVE-2021-37910 by sending specially crafted SAE authentication frames to remotely disconnect other users' connections.
Is my ASUS router vulnerable to CVE-2021-37910?
If your ASUS router is running GT-AXE11000 firmware up to version 3.0.0.4.386.45898 or RT-AX3000 firmware up to version 3.0.0.4.386.45898, it is vulnerable to CVE-2021-37910.