CVE-2021-41435
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
Published:Nov 19, 2021
Last Modified:Nov 21, 2024
EPS:Nov 19, 2021
EPSS Score:0.01853
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Asus
Product
Gt-ax11000
Asus
Gt-ax11000
Vendor
Asus
Product
Gt-ax11000 Firmware
Asus
Gt-ax11000 Firmware
Vendor
Asus
Product
Rt-ax3000
Asus
Rt-ax3000
Vendor
Asus
Product
Rt-ax3000 Firmware
Asus
Rt-ax3000 Firmware
Vendor
Asus
Product
Rt-ax55
Asus
Rt-ax55
Vendor
Asus
Product
Rt-ax55 Firmware
Asus
Rt-ax55 Firmware
Vendor
Asus
Product
Rt-ax56u
Asus
Rt-ax56u
Vendor
Asus
Product
Rt-ax56u Firmware
Asus
Rt-ax56u Firmware
Vendor
Asus
Product
Rt-ax56u V2
Asus
Rt-ax56u V2
Vendor
Asus
Product
Rt-ax56u V2 Firmware
Asus
Rt-ax56u V2 Firmware
Vendor
Asus
Product
Rt-ax58u
Asus
Rt-ax58u
Vendor
Asus
Product
Rt-ax58u Firmware
Asus
Rt-ax58u Firmware
Vendor
Asus
Product
Rt-ax68u
Asus
Rt-ax68u
Vendor
Asus
Product
Rt-ax68u Firmware
Asus
Rt-ax68u Firmware
Vendor
Asus
Product
Rt-ax82u
Asus
Rt-ax82u
Vendor
Asus
Product
Rt-ax82u Firmware
Asus
Rt-ax82u Firmware
Vendor
Asus
Product
Rt-ax82u Gundam Edition
Asus
Rt-ax82u Gundam Edition
Vendor
Asus
Product
Rt-ax82u Gundam Edition Firmware
Asus
Rt-ax82u Gundam Edition Firmware
Vendor
Asus
Product
Rt-ax86s
Asus
Rt-ax86s
Vendor
Asus
Product
Rt-ax86s Firmware
Asus
Rt-ax86s Firmware
Vendor
Asus
Product
Rt-ax86u
Asus
Rt-ax86u
Vendor
Asus
Product
Rt-ax86u Firmware
Asus
Rt-ax86u Firmware
Vendor
Asus
Product
Rt-ax86u Zaku Ii Edition
Asus
Rt-ax86u Zaku Ii Edition
Vendor
Asus
Product
Rt-ax86u Zaku Ii Edition Firmware
Asus
Rt-ax86u Zaku Ii Edition Firmware
Vendor
Asus
Product
Rt-ax88u
Asus
Rt-ax88u
Vendor
Asus
Product
Rt-ax88u Firmware
Asus
Rt-ax88u Firmware
Vendor
Asus
Product
Rt-ax92u
Asus
Rt-ax92u
Vendor
Asus
Product
Rt-ax92u Firmware
Asus
Rt-ax92u Firmware
Vendor
Asus
Product
Tuf-ax5400
Asus
Tuf-ax5400
Vendor
Asus
Product
Tuf-ax5400 Firmware
Asus
Tuf-ax5400 Firmware
Vendor
Asus
Product
Tuf Gaming Ax3000
Asus
Tuf Gaming Ax3000
Vendor
Asus
Product
Tuf Gaming Ax3000 Firmware
Asus
Tuf Gaming Ax3000 Firmware
Vendor
Asus
Product
Zenwifi Ax \(xt8\)
Asus
Zenwifi Ax \(xt8\)
Vendor
Asus
Product
Zenwifi Ax \(xt8\) Firmware
Asus
Zenwifi Ax \(xt8\) Firmware
Vendor
Asus
Product
Zenwifi Xd6
Asus
Zenwifi Xd6
Vendor
Asus
Product
Zenwifi Xd6 Firmware
Asus
Zenwifi Xd6 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
