CVE-2024-3912: ASUS Router - Upload arbitrary firmware
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.2.3_792 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.2.3_807 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.1.2.3_999 - Configuration
If replacement is not possible in the short term, disable Web access from WAN, virtual servers (Port forwarding), DDNS, VPN server, DMZ, and port trigger.
ASUS routers Web access from WAN, virtual servers (port forwarding), DDNS, VPN server, DMZ, and port trigger = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3912?
The severity of CVE-2024-3912 is critical with a CVSS score of 9.8.
What does CVE-2024-3912 allow an attacker to do?
CVE-2024-3912 allows an unauthenticated remote attacker to upload arbitrary firmware and execute arbitrary system commands on affected ASUS routers.
Which models are affected by CVE-2024-3912?
Affected models include DSL-N17U, DSL-N55U_C1, DSL-N55U_D1, DSL-N66U, and several others.
How do I fix CVE-2024-3912?
To fix CVE-2024-3912, update the affected ASUS router models to the specified versions as listed in the vulnerability details.
Is CVE-2024-3912 related to malicious file uploads?
Yes, CVE-2024-3912 is categorized under malicious file uploads as it exploits the firmware upload functionality.