PT-2024-4209 · Asus · Asus Routers

Carlos Köpke · CVE-2024-3912 · Published 2024-06-14 · Updated 2026-03-10

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASUS routers (affected versions not specified)

Description The issue concerns an arbitrary firmware upload vulnerability in certain ASUS router models. This vulnerability can be exploited by an unauthenticated remote attacker to execute arbitrary system commands on the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2024-04695

CVE-2024-3912

Affected Products

Asus Routers

References · 16

• https://bdu.fstec.ru/vul/2024-04695 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3912 · Security Note
• https://t.me/secharvester/16448 · Telegram Post
• https://twitter.com/syedaquib77/status/1914415223047409913 · Twitter Post
• https://twcert.org.tw/en/cp-139-7876-396bd-2.html · Note
• https://t.me/true_secator/5862 · Telegram Post
• https://twitter.com/fletch_ai/status/1804333549786665288 · Twitter Post
• https://t.me/tmfeed/205987 · Telegram Post
• https://twitter.com/fletch_ai/status/1804333552210956670 · Twitter Post
• https://asus.com/content/asus-product-security-advisory · Note
• https://t.me/opennews/12959 · Telegram Post
• https://twitter.com/CveFindCom/status/1801555432084750473 · Twitter Post
• https://twitter.com/aviatrixtrc/status/2031517446847316148 · Twitter Post
• https://t.me/cvenotify/83285 · Telegram Post
• https://twcert.org.tw/tw/cp-132-7875-872d3-1.html · Note