Description
Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | ZenWiFi XT8 | earlier – ≤ 3.0.0.4.388_24609 | — |
| ASUS | ZenWiFi XT8 V2 | earlier – ≤ 3.0.0.4.388_24609 | — |
| ASUS | RT-AX88U | earlier – ≤ 3.0.0.4.388_24198 | — |
| ASUS | RT-AX58U | earlier – ≤ 3.0.0.4.388_23925 | — |
| ASUS | RT-AX57 | earlier – ≤ 3.0.0.4.386_52294 | — |
| ASUS | RT-AC86U | earlier – ≤ 3.0.0.4.386_51915 | — |
| ASUS | RT-AC68U | earlier – ≤ 3.0.0.4.386_51668 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- ASUS DSL-AC88U - Authentication Bypass http/cves/2024/CVE-2024-3080.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://www.twcert.org.tw/tw/cp-132-7859-0e104-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-7860-760b1-2.html third-party-advisory