PT-2021-19232 · Asus · Asus Rt-Ax3000+2

Published 2021-04-12 · Updated 2021-04-20 · CVE-2021-3128

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ASUS RT-AX3000 versions prior to 3.0.0.4.386.42095 ASUS ZenWiFi AX (XT8) versions prior to 3.0.0.4.386.42095 ASUS RT-AX88U versions prior to 9.0.0.4.386.41994

Description A routing loop can occur when IPv6 is used, generating excessive network traffic between an affected device and its upstream ISP's router. This happens when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

Recommendations For ASUS RT-AX3000 versions prior to 3.0.0.4.386.42095, update the firmware to version 3.0.0.4.386.42095 or later. For ASUS ZenWiFi AX (XT8) versions prior to 3.0.0.4.386.42095, update the firmware to version 3.0.0.4.386.42095 or later. For ASUS RT-AX88U versions prior to 9.0.0.4.386.41994, update the firmware to version 9.0.0.4.386.41994 or later.

Fix

Weakness Enumeration

CWE-834

Related Identifiers

CVE-2021-3128

Affected Products

Asus Rt-Ax3000

Asus Rt-Ax88U

Asus Zenwifi Ax

References · 29

• https://asus.com/supportonly/RT-AC86U/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC68R/HelpDesk_download · Vendor Advisory
• https://asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX56U/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/supportonly/RT-AC5300/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC68P/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC58U/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC88U/HelpDesk_download · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-3128 · Vendor Advisory
• https://asus.com/supportonly/RT-AC1900/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC68W/HelpDesk_download · Vendor Advisory
• https://asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC66U-B1/HelpDesk_Download · Vendor Advisory
• https://asus.com/supportonly/RT-AC3100/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC85U/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC1900P/HelpDesk_download · Vendor Advisory
• https://asus.com/supportonly/RT-AC68RW/HelpDesk_download · Vendor Advisory