ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models
Software patches have been released by ASUS to fix a serious security vulnerability that was affecting its routers and could be used by hostile actors to get beyond authentication.
The vulnerability, identified as CVE-2024-3080, has a CVSS score of 9.8 out of a possible 10.0.
According to a description of the vulnerability provided by the Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC), some ASUS router models have an authentication bypass vulnerability that makes it possible for unauthenticated remote attackers to log in to the device.
The Taiwanese company also addressed a high-severity buffer overflow vulnerability known as CVE-2024-3079 (CVSS score: 7.2), which may be used as a weapon by remote attackers with administrative rights to take control of ...