← CVE Intelligence

CVE-2024-0401

ASUS OVPN RCE PUBLISHED

Description (CNA)

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

Affected (CNA)

Vendor / productVersions
ASUS / ExpertWiFiaffected 0 before 3.0.0.6.102_44544
ASUS / RT-AX55affected 0 before 3.0.0.4.386_52303
ASUS / RT-AX58Uaffected 0 before 3.0.0.4.388_24762
ASUS / RT-AC67Uaffected 0 before 3.0.0.4.386_51685
ASUS / RT-AC68Raffected 0 before 3.0.0.4.386_51685
ASUS / RT-AC68Uaffected 0 before 3.0.0.4.386_51685
ASUS / RT-AX86 Seriesaffected 0 before 3.0.0.4.388_24243
ASUS / RT-AC86Uaffected 0 before 3.0.0.4.386_51925
ASUS / RT-AX88Uaffected 0 before 3.0.0.4.388_24209
ASUS / RT-AX3000affected 0 before 3.0.0.4.388_24762

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.