7.8

CVE-2021-41436

An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asus ≫ Gt-ax11000 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Gt-ax11000 Version -
Asus ≫ Rt-ax3000 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax3000 Version -
Asus ≫ Rt-ax55 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax55 Version -
Asus ≫ Rt-ax56u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax56u Version -
Asus ≫ Rt-ax56u V2 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax56u V2 Version -
Asus ≫ Rt-ax58u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax58u Version -
Asus ≫ Rt-ax82u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax82u Version -
Asus ≫ Rt-ax82u Gundam Edition Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax82u Gundam Edition Version -
Asus ≫ Rt-ax82u Gundam Edition Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax82u Gundam Edition Version -
Asus ≫ Rt-ax86u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax86u Version -
Asus ≫ Rt-ax86s Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax86s Version -
Asus ≫ Rt-ax86u Zaku Ii Edition Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax86u Zaku Ii Edition Version -
Asus ≫ Rt-ax88u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax88u Version -
Asus ≫ Rt-ax92u Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Rt-ax92u Version -
Asus ≫ Tuf Gaming Ax3000 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Tuf Gaming Ax3000 Version -
Asus ≫ Tuf-ax5400 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Tuf-ax5400 Version -
Asus ≫ Zenwifi Xd6 Firmware Version < 3.0.0.4.386.45898
   Asus ≫ Zenwifi Xd6 Version -
Asus ≫ Rt-ax68u Firmware Version < 3.0.0.4.386.45911
   Asus ≫ Rt-ax68u Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.57% 0.904
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

https://rog.asus.com/networking/rog-rapture-gt-ax11000-model/helpdesk_bios
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-XD6/HelpDesk_BIOS/
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX3000/HelpDesk_BIOS/
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX56U/HelpDesk_BIOS/
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX68U/HelpDesk_BIOS/
Vendor Advisory
Product
https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/All-series/RT-AX55/HelpDesk_BIOS/
Vendor Advisory
Product