{"id":"CVE-2024-3080","published":"2024-06-14T02:57:27Z","modified":"2024-08-01T19:32:42Z","title":"ASUS Router - Improper Authentication","vendor":"ASUS","product":"ZenWiFi XT8","tier":"core","eol":null,"affectedVersions":[{"vendor":"ASUS","product":"ZenWiFi XT8","versions":[">= earlier, <= 3.0.0.4.388_24609"]},{"vendor":"ASUS","product":"ZenWiFi XT8 V2","versions":[">= earlier, <= 3.0.0.4.388_24609"]},{"vendor":"ASUS","product":"RT-AX88U","versions":[">= earlier, <= 3.0.0.4.388_24198"]},{"vendor":"ASUS","product":"RT-AX58U","versions":[">= earlier, <= 3.0.0.4.388_23925"]},{"vendor":"ASUS","product":"RT-AX57","versions":[">= earlier, <= 3.0.0.4.386_52294"]},{"vendor":"ASUS","product":"RT-AC86U","versions":[">= earlier, <= 3.0.0.4.386_51915"]},{"vendor":"ASUS","product":"RT-AC68U","versions":[">= earlier, <= 3.0.0.4.386_51668"]}],"description":{"text":"Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.","provenance":"source","from":"CVE.org"},"summary":{"text":"The authentication flaw affects certain ASUS router models, with the ZenWiFi XT8 named as the product, and stems from improper authentication in the device's login handling. An unauthenticated remote attacker can bypass authentication and log in to the device, requiring only network reachability to the router and no credentials, user interaction, or specific configuration.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T05:10:18Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.43456,"percentile":0.98736,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-10-04","exploitedFirstSeen":"2024-10-04","ransomware":false,"evidence":[{"url":"https://blog.cloudflare.com/how-cloudflare-auto-mitigated-world-record-3-8-tbps-ddos-attack/","date":"2024-10-04"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":2,"pulses":[{"name":"Threat Spotlight: Hijacked Routers and Fake Searches Fueling Payroll Heist.","url":"https://otx.alienvault.com/pulse/68467cedcd14e455968f3e6b","created":"2025-06-09"},{"name":"Threat Spotlight: Hijacked Routers and Fake Searches Fueling Payroll Heist - ReliaQuest","url":"https://otx.alienvault.com/pulse/682edd4c87df48ead3fd0bb8","created":"2025-05-22"}],"provenance":"machine"},"cwes":[{"id":"CWE-287","name":"Improper Authentication"}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-7859-0e104-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-7860-760b1-2.html","tags":["third-party-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-31686","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-31686","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2024-3080","name":"ASUS DSL-AC88U - Authentication Bypass","severity":"critical","path":"http/cves/2024/CVE-2024-3080.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3080.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-06-14","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-3080","provenance":"source"},{"date":"2024-10-04","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.cloudflare.com/how-cloudflare-auto-mitigated-world-record-3-8-tbps-ddos-attack/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":67.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 757 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.75,"detail":"percentile 0.9874"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}