CVE Feed

    Dashboard / CVE / CVE-2021-41436

    CVE-2021-41436

    An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.

    Published:Nov 19, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 19, 2021
    EPSS Score:0.04577
    CVSS Score:7.5

    Affected Products

    Vendor
    Asus
    Product
    Gt-ax11000
    Vendor
    Asus
    Product
    Gt-ax11000 Firmware
    Vendor
    Asus
    Product
    Rt-ax3000
    Vendor
    Asus
    Product
    Rt-ax3000 Firmware
    Vendor
    Asus
    Product
    Rt-ax55
    Vendor
    Asus
    Product
    Rt-ax55 Firmware
    Vendor
    Asus
    Product
    Rt-ax56u
    Vendor
    Asus
    Product
    Rt-ax56u Firmware
    Vendor
    Asus
    Product
    Rt-ax56u V2
    Vendor
    Asus
    Product
    Rt-ax56u V2 Firmware
    Vendor
    Asus
    Product
    Rt-ax58u
    Vendor
    Asus
    Product
    Rt-ax58u Firmware
    Vendor
    Asus
    Product
    Rt-ax68u
    Vendor
    Asus
    Product
    Rt-ax68u Firmware
    Vendor
    Asus
    Product
    Rt-ax82u
    Vendor
    Asus
    Product
    Rt-ax82u Firmware
    Vendor
    Asus
    Product
    Rt-ax82u Gundam Edition
    Vendor
    Asus
    Product
    Rt-ax82u Gundam Edition Firmware
    Vendor
    Asus
    Product
    Rt-ax86s
    Vendor
    Asus
    Product
    Rt-ax86s Firmware
    Vendor
    Asus
    Product
    Rt-ax86u
    Vendor
    Asus
    Product
    Rt-ax86u Firmware
    Vendor
    Asus
    Product
    Rt-ax86u Zaku Ii Edition
    Vendor
    Asus
    Product
    Rt-ax86u Zaku Ii Edition Firmware
    Vendor
    Asus
    Product
    Rt-ax88u
    Vendor
    Asus
    Product
    Rt-ax88u Firmware
    Vendor
    Asus
    Product
    Rt-ax92u
    Vendor
    Asus
    Product
    Rt-ax92u Firmware
    Vendor
    Asus
    Product
    Tuf-ax5400
    Vendor
    Asus
    Product
    Tuf-ax5400 Firmware
    Vendor
    Asus
    Product
    Tuf Gaming Ax3000
    Vendor
    Asus
    Product
    Tuf Gaming Ax3000 Firmware
    Vendor
    Asus
    Product
    Zenwifi Ax \(xt8\)
    Vendor
    Asus
    Product
    Zenwifi Ax \(xt8\) Firmware
    Vendor
    Asus
    Product
    Zenwifi Xd6
    Vendor
    Asus
    Product
    Zenwifi Xd6 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High