CVE-2024-3080CWE-287

ASUS Router - Improper Authentication

Critical · published June 14, 2024

CVSS v3.1
9.8
EPSS
43%
Percentile
98.7
In the wild
Unconfirmed
What it is

🚨 A staggering authentication bypass flaw lurks in certain ASUS routers, letting anyone waltz right in without breaking a sweat! 🔥 Think of it like leaving your front door wide open, and anyone can just stroll in without even ringing the doorbell. It’s a simple oversight, but the consequences could be huge! An attacker could gain full access to your router, potentially changing settings, intercepting your internet traffic, or even launching further attacks on your home network. This could lead to compromised data and unauthorized access to connected devices — absolutely devastating!

Put simply

Think of it like leaving your front door wide open, and anyone can just stroll in without even ringing the doorbell. It’s a simple oversight, but the consequences could be huge! This vulnerability stems from improper authentication checks on certain ASUS router models, allowing unauthenticated remote attackers to log in and take control of the device without any valid credentials.

What to do

An attacker could gain full access to your router, potentially changing settings, intercepting your internet traffic, or even launching further attacks on your home network. This could lead to compromised data and unauthorized access to connected devices — absolutely devastating! Immediately check if your router model is affected and patch it to the latest firmware version provided by ASUS. If no patch is available, consider implementing additional network security measures like changing default settings and disabling remote access features. Don't wait — secure your network! You've got this! Follow these steps and you'll have your router locked down in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.43456 · 98.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-06-14T02:57Z
EPSS history
Timeline
  • 14 JUN 02:57Z
    ASUS Router - Improper Authentication
    cvelistv5