Files
vuln-nvd/data/2024/CVE-2024-3912.json
T

2 lines
7.3 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"DSL-N17U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N55U_C1","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N55U_D1","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N66U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N12U_C1","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N12U_D1","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N14U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N14U_B1","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N16","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC51","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC750","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC52U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC55U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC56U","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N10_C1","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N10_D1","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N10P_C1","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N12E_C1","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N16P","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N16U","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-AC52","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-AC55","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]}],"source":"twcert@cert.org.tw"},{"affectedData":[{"cpes":["cpe:2.3:o:asus:dsl-n55u_d1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n17u_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n55u_c1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n66u_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"dsl-n66u_firmware","vendor":"asus","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:h:asus:dsl-n14u_b1:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n14u_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n12u_c1_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"dsl-n12u_c1_firmware","vendor":"asus","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:asus:dsl-ac56u_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac55u_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac52u_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac750_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac51_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n16p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n10p_c1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n10_d1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac52_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac55_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"dsl-ac55_firmware","vendor":"asus","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:asus:dsl-n16p_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n10p_c1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n10_d1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac52_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-ac55_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n16_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n12e_c1_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:asus:dsl-n10_c1_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"dsl-n10_c1_firmware","vendor":"asus","versions":[{"lessThanOrEqual":"*","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device."},{"lang":"es","value":"Ciertos modelos de enrutadores ASUS tienen una vulnerabilidad de carga de firmware arbitraria. Un atacante remoto no autenticado puede aprovechar esta vulnerabilidad para ejecutar comandos arbitrarios del sistema en el dispositivo."}],"id":"CVE-2024-3912","lastModified":"2026-11-03T22:17:23.200","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"twcert@cert.org.tw","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3912","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-06-28T03:55:21.843924Z","version":"2.0.3"}}]},"published":"2024-06-14T10:15:10.513","references":[{"source":"twcert@cert.org.tw","url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"twcert@cert.org.tw","url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"}],"sourceIdentifier":"twcert@cert.org.tw","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-434"}],"source":"twcert@cert.org.tw","type":"Secondary"}]}