CVE-2021-37317

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary…

Critical · published February 3, 2023

CVSS v3.1
9.1
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

🔥 A sneaky directory traversal flaw in ASUS RT-AC68U routers could let attackers write files without breaking a sweat! 🚨 Think of it like a store clerk who lets anyone walk behind the counter and rearrange the inventory without checking ID — chaos ensues when unauthorized hands can put anything they want in the back room! If exploited, an attacker could place malicious files on your router, potentially leading to unauthorized access or even complete control over the device. This could expose your network to significant risks, allowing intruders to manipulate settings or intercept data. It's absolutely devastating for your digital security!

Put simply

Think of it like a store clerk who lets anyone walk behind the counter and rearrange the inventory without checking ID — chaos ensues when unauthorized hands can put anything they want in the back room! This vulnerability allows remote attackers to perform COPY and MOVE operations without proper sanitation checks, leading to arbitrary file writes on the ASUS RT-AC68U router firmware versions before 3.0.0.4.386.41634.

What to do

If exploited, an attacker could place malicious files on your router, potentially leading to unauthorized access or even complete control over the device. This could expose your network to significant risks, allowing intruders to manipulate settings or intercept data. It's absolutely devastating for your digital security! To secure your router, update to firmware version 3.0.0.4.386.41634 immediately. Ensure that all related settings are checked and secured post-update to prevent future exploits. Regularly review firmware updates to stay protected! You've got this! By taking these steps, your router will be locked down tight! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01536 · 74.7th percentile
Published
2023-02-03T00:00Z
EPSS history
Timeline
  • 03 FEB 00:00Z
    Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary…
    cvelistv5