9.8

CVE-2024-3080

ASUS Router - Improper Authentication

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellerasus
≫
Produkt rt-ax58u_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.388_24762
Status affected
Herstellerasus
≫
Produkt rt-ax88u_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.388_24209
Status affected
Herstellerasus
≫
Produkt rt-ax57_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.386_52294
Status affected
Herstellerasus
≫
Produkt rt-ac86u_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.386_51915
Status affected
Herstellerasus
≫
Produkt rt-ac68u_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.386_51668
Status affected
Herstellerasus
≫
Produkt zenwifi_xt8_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.388_24609
Status affected
Herstellerasus
≫
Produkt zenwifi_xt8_v2_firmware
Default Statusunknown
Version 0
Version < 3.0.0.4.388_24609
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 53.69% 0.98
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
twcert@cert.org.tw 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.