CVE Feed

    Dashboard / CVE / CVE-2024-3079

    CVE-2024-3079

    Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.

    Published:Jun 14, 2024
    Last Modified:Apr 15, 2026
    EPS:Jun 14, 2024
    EPSS Score:0.03547
    CVSS Score:7.2

    Affected Products

    Vendor
    Asus
    Product
    Rt-ac68u Firmware
    Vendor
    Asus
    Product
    Rt-ac86u Firmware
    Vendor
    Asus
    Product
    Rt-ax57 Firmware
    Vendor
    Asus
    Product
    Rt-ax58u Firmware
    Vendor
    Asus
    Product
    Rt-ax88u Firmware
    Vendor
    Asus
    Product
    Zenwifi Xt8 Firmware
    Vendor
    Asus
    Product
    Zenwifi Xt8 V2 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-37315 (CVSS 9.1) — Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4…
    CVE-2021-37316 (CVSS 7.5) — SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 al…
    CVE-2021-37317 (CVSS 9.1) — Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41…
    CVE-2021-43702 (CVSS 9) — ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does n…
    CVE-2021-45757 (CVSS 7.5) — ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of s…
    CVE-2021-45756 (CVSS 9.8) — Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blockin…
    CVE-2021-3128 (CVSS 7.5) — In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9…
    CVE-2018-0582 (CVSS 6.1) — Cross-site scripting vulnerability in ASUS RT-AC68U Firmware version prior to 3.0.0.4.380.1031 allows remote a…
    CVE-2018-9285 (CVSS 9.8) — Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, …
    CVE-2014-7269 (CVSS 6.5) — ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High