Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2024-3912 EUVD-2024-32480GHSA-67j2-frvf-p57m

ASUS Router - Upload arbitrary firmware

Published Jun 14, 2024 · Updated Nov 4, 2026 · Assigned by twcert

Vendor: ASUS Product: DSL-AC51 Product: DSL-AC52 Product: DSL-AC52U Product: DSL-AC55 Product: DSL-AC55U Product: DSL-AC56U Product: DSL-AC750 Product: DSL-N10_C1 Product: DSL-N10_D1 Product: DSL-N10P_C1 Product: DSL-N12E_C1 Product: DSL-N12U_C1 Product: DSL-N12U_D1 Product: DSL-N14U Product: DSL-N14U_B1 Product: DSL-N16 Product: DSL-N16P Product: DSL-N16U Product: DSL-N17U Product: DSL-N55U_C1 Product: DSL-N55U_D1 Product: DSL-N66U

Description

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

Affected products

VendorProductAffectedFixed
ASUS DSL-N17U earlier – < 1.1.2.3_792 1.1.2.3_792
ASUS DSL-N55U_C1 earlier – < 1.1.2.3_792 1.1.2.3_792
ASUS DSL-N55U_D1 earlier – < 1.1.2.3_792 1.1.2.3_792
ASUS DSL-N66U earlier – < 1.1.2.3_792 1.1.2.3_792
ASUS DSL-N12U_C1 earlier – < 1.1.2.3_807 1.1.2.3_807
ASUS DSL-N12U_D1 earlier – < 1.1.2.3_807 1.1.2.3_807
ASUS DSL-N14U earlier – < 1.1.2.3_807 1.1.2.3_807
ASUS DSL-N14U_B1 earlier – < 1.1.2.3_807 1.1.2.3_807
ASUS DSL-N16 earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-AC51 earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-AC750 earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-AC52U earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-AC55U earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-AC56U earlier – < 1.1.2.3_999 1.1.2.3_999
ASUS DSL-N10_C1 All —
ASUS DSL-N10_D1 All —
ASUS DSL-N10P_C1 All —
ASUS DSL-N12E_C1 All —
ASUS DSL-N16P All —
ASUS DSL-N16U All —
ASUS DSL-AC52 All —
ASUS DSL-AC55 All —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • H4rk3nz0/CVE-2024-3912 ★ 0 · Mar 6, 2026

    Asus Router Arbitrary File Write to Remote Code Execution PoC - Fk Mirai

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References