CVE-2021-3166

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices

published January 18, 2021

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update, resulting in a persistent outage of those services.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02879 · 86.7th percentile
Published
2021-01-18T04:55Z
EPSS history
Timeline
  • 18 JAN 04:55Z
    An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices
    cvelistv5