9.8

CVE-2024-3080

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Vendorasus
≫
Product rt-ax58u_firmware
Default Statusunknown
Version < 3.0.0.4.388_24762
Version 0
Status affected
Vendorasus
≫
Product rt-ax88u_firmware
Default Statusunknown
Version < 3.0.0.4.388_24209
Version 0
Status affected
Vendorasus
≫
Product rt-ax57_firmware
Default Statusunknown
Version < 3.0.0.4.386_52294
Version 0
Status affected
Vendorasus
≫
Product rt-ac86u_firmware
Default Statusunknown
Version < 3.0.0.4.386_51915
Version 0
Status affected
Vendorasus
≫
Product rt-ac68u_firmware
Default Statusunknown
Version < 3.0.0.4.386_51668
Version 0
Status affected
Vendorasus
≫
Product zenwifi_xt8_firmware
Default Statusunknown
Version < 3.0.0.4.388_24609
Version 0
Status affected
Vendorasus
≫
Product zenwifi_xt8_v2_firmware
Default Statusunknown
Version < 3.0.0.4.388_24609
Version 0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 42.89% 0.974
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
twcert@cert.org.tw 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.