ASUS Resolves Critical Authentication Bypass Vulnerability in Several Router Models

Tech & AI | June 17, 2024, 1:14 p.m.

ASUS has addressed a critical security flaw in its routers through software updates, following the discovery of an authentication bypass vulnerability that could be exploited by malicious actors. Tracked as CVE-2024-3080, this vulnerability poses a significant risk with a CVSS score of 9.8 out of 10. The flaw allows unauthenticated remote attackers to log into certain ASUS router models, as reported by the Taiwan Computer Emergency Response Team. Furthermore, ASUS has also patched a high-severity buffer overflow vulnerability (CVE-2024-3079) that could be leveraged by remote attackers to execute arbitrary commands. Both vulnerabilities could be combined in an exploit chain to bypass authentication and execute malicious code. Users of affected router models are urged to update to the latest firmware version to safeguard against potential threats. This marks another instance of ASUS swiftly responding to critical security issues, demonstrating their commitment to customer safety and device protection.