CVE-2024-3912
CRITICAL 1 PoC
INFO
Priority: 0.10
BB Relevance:
90/100
Published: 2024-06-14
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
Weakness Classification (1)
Affected Software (44)
| Vendor | Product | Version |
|---|---|---|
| ASUS | DSL-AC51 | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC51 | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC52 | All |
| ASUS | DSL-AC52 | All |
| ASUS | DSL-AC52U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC52U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC55 | All |
| ASUS | DSL-AC55 | All |
| ASUS | DSL-AC55U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC55U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC56U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC56U | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC750 | earlier < 1.1.2.3_999 |
| ASUS | DSL-AC750 | earlier < 1.1.2.3_999 |
| ASUS | DSL-N10P_C1 | All |
| ASUS | DSL-N10P_C1 | All |
| ASUS | DSL-N10_C1 | All |
| ASUS | DSL-N10_C1 | All |
| ASUS | DSL-N10_D1 | All |
| ASUS | DSL-N10_D1 | All |
| ASUS | DSL-N12E_C1 | All |
| ASUS | DSL-N12E_C1 | All |
| ASUS | DSL-N12U_C1 | earlier < 1.1.2.3_807 |
| ASUS | DSL-N12U_C1 | earlier < 1.1.2.3_807 |
| ASUS | DSL-N12U_D1 | earlier < 1.1.2.3_807 |
| ASUS | DSL-N12U_D1 | earlier < 1.1.2.3_807 |
| ASUS | DSL-N14U | earlier < 1.1.2.3_807 |
| ASUS | DSL-N14U | earlier < 1.1.2.3_807 |
| ASUS | DSL-N14U_B1 | earlier < 1.1.2.3_807 |
| ASUS | DSL-N14U_B1 | earlier < 1.1.2.3_807 |
Showing 30 of 44 entries
References & Advisories (2)
third-party-advisory
third-party-advisory