7.2

CVE-2024-3079

Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorasus
≫
Product rt-ax58u_firmware
Default Statusunknown
Version < 3.0.0.4.388_24762
Version 0
Status affected
Vendorasus
≫
Product rt-ax88u_firmware
Default Statusunknown
Version < 3.0.0.4.388_24209
Version 0
Status affected
Vendorasus
≫
Product rt-ax57_firmware
Default Statusunknown
Version < 3.0.0.4.386_52294
Version 0
Status affected
Vendorasus
≫
Product rt-ac86u_firmware
Default Statusunknown
Version < 3.0.0.4.386_51915
Version 0
Status affected
Vendorasus
≫
Product rt-ac68u_firmware
Default Statusunknown
Version < 3.0.0.4.386_51668
Version 0
Status affected
Vendorasus
≫
Product zenwifi_xt8_firmware
Default Statusunknown
Version < 3.0.0.4.388_24609
Version 0
Status affected
Vendorasus
≫
Product zenwifi_xt8_v2_firmware
Default Statusunknown
Version < 3.0.0.4.388_24609
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.04% 0.862
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
twcert@cert.org.tw 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).