CVE-2024-11985mediumCWE-20

CVE-2024-11985: falha de média gravidade em ASUS RT-AX55

Publicada em

Seguir esta CVE+ Monitorar RT-AX56U+ Monitorar RT-AX55

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.4%
An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
ASUS · RT-AX55ASUS · RT-AX55 V2ASUS · RT-AX56UASUS · RT-AX56U_V2ASUS · RT-AX57ASUS · RT-AX58UASUS · RT-AX58U V2
CVEs relacionadas — ASUS RT-AX55

No mesmo produto, das mais perigosas para as menos.

CVE-2023-39780HIGHCVE-2023-39780EPSS 39.5%KEVCVE-2021-37910LOWASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper AuthenticationEPSS 2.1%CVE-2023-41348HIGHASUS RT-AX55 - command injection - 4EPSS 1.7%CVE-2023-41347HIGHASUS RT-AX55 - command injection - 3EPSS 1.7%CVE-2023-41345HIGHASUS RT-AX55 - command injection - 1EPSS 1.7%CVE-2023-41346HIGHASUS RT-AX55 - command injection - 2EPSS 1.6%