CVE-2024-3079

ASUS Router - Stack-based Buffer Overflow

State: Published
Severity: 7.2 High
Published: Jun 14, 2024
Updated: Aug 1, 2024
Reserved: Mar 29, 2024

Description

Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.

Scores

CVSS	Score	Vector	Source
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
ZenWiFi XT8ASUS	earlier through 3.0.0.4.388_24609Affected
ZenWiFi XT8 V2ASUS	earlier through 3.0.0.4.388_24609Affected
RT-AX88UASUS	earlier through 3.0.0.4.388_24198Affected
RT-AX58UASUS	earlier through 3.0.0.4.388_23925Affected
RT-AX57ASUS	earlier through 3.0.0.4.386_52294Affected
RT-AC86UASUS	earlier through 3.0.0.4.386_51915Affected
RT-AC68UASUS	earlier through 3.0.0.4.386_51668Affected

References

https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.htmlthird-party-advisory
https://www.twcert.org.tw/en/cp-139-7858-3c978-2.htmlthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.