CVE-2021-37910

ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

State: Published
Severity: 3.7 Low
Published: Nov 12, 2021
Updated: Sep 16, 2024
Reserved: Aug 2, 2021

Description

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L	twcert

Weaknesses

CWE-799 Improper Control of Interaction Frequency

Affected Products

Product	Versions
GT-AXE11000ASUS	before 3.0.0.4.386.45898Affected
RT-AX3000ASUS	before 3.0.0.4.386.45898Affected
RT-AX55ASUS	before 3.0.0.4.386.45898Affected
RT-AX58UASUS	before 3.0.0.4.386.45898Affected
TUF-AX3000ASUS	before 3.0.0.4.386.45898Affected

References

https://www.twcert.org.tw/tw/cp-132-5259-22a26-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.