BaseFortify

Publication date: 2024-06-14

Last updated on: 2024-11-21

Assigner: TWCERT/CC

Description

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2024-06-14

Last Modified

2024-11-21

Generated

2026-09-11

EPSS Evaluated

2026-09-10

NVD

CVE-2024-3912

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2024-3912. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70