CVE-2024-3912
Full vulnerability record from the local CVENow database.
Description
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2024-06-14 10:15:10.513000
Last modified
2026-11-03 22:17:23.200000
View original CVE JSON
{
"id": "CVE-2024-3912",
"sourceIdentifier": "[email protected]",
"published": "2024-06-14T10:15:10.513",
"lastModified": "2026-11-03T22:17:23.200",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device."
},
{
"lang": "es",
"value": "Ciertos modelos de enrutadores ASUS tienen una vulnerabilidad de carga de firmware arbitraria. Un atacante remoto no autenticado puede aprovechar esta vulnerabilidad para ejecutar comandos arbitrarios del sistema en el dispositivo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "ASUS",
"product": "DSL-N17U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_792",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N55U_C1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_792",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N55U_D1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_792",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N66U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_792",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N12U_C1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_807",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N12U_D1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_807",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N14U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_807",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N14U_B1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_807",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N16",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC51",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC750",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC52U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC55U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC56U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "earlier",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N10_C1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N10_D1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N10P_C1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N12E_C1",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N16P",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-N16U",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC52",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
},
{
"vendor": "ASUS",
"product": "DSL-AC55",
"defaultStatus": "unaffected",
"versions": [
{
"version": "All",
"status": "affected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "asus",
"product": "dsl-n66u_firmware",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:o:asus:dsl-n55u_d1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n17u_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n55u_c1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n66u_firmware:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "1.1.2.3_792",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "asus",
"product": "dsl-n12u_c1_firmware",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:h:asus:dsl-n14u_b1:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n14u_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n12u_c1_firmware:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "1.1.2.3_807",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "asus",
"product": "dsl-ac55_firmware",
"defaultStatus": "unaffected",
"cpes": [
"cpe:2.3:o:asus:dsl-ac56u_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac55u_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac52u_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac750_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac51_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n16p_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n10p_c1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n10_d1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac52_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac55_firmware:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "1.1.2.3_999",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "asus",
"product": "dsl-n10_c1_firmware",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:o:asus:dsl-n16p_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n10p_c1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n10_d1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac52_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-ac55_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n16_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n12e_c1_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:asus:dsl-n10_c1_firmware:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThanOrEqual": "*",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-06-28T03:55:21.843924Z",
"id": "CVE-2024-3912",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html",
"source": "[email protected]"
},
{
"url": "https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html",
"source": "[email protected]"
},
{
"url": "https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}