CVE-2024-11985

State: Published
Severity: 4.4 Medium
Published: Dec 4, 2024
Updated: Dec 4, 2024
Reserved: Nov 29, 2024

Description

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H	ASUS

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
RT-AX55ASUS	before 3.0.0.4.386_52332Affected
RT-AX55 V2ASUS	before 3.0.0.4.386_52332Affected
RT-AX56UASUS	before 3.0.0.4.386_51712Affected
RT-AX56U_V2ASUS	before 3.0.0.4.386_52332Affected
RT-AX57ASUS	before 3.0.0.4.386_52332Affected
RT-AX58UASUS	before 3.0.0.4_388_25127Affected
RT-AX58U V2ASUS	before 3.0.0.4_388_25127Affected

References

https://www.asus.com/content/asus-product-security-advisory/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.