{"affected":[{"defaultStatus":"unaffected","product":"DSL-N17U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N55U_C1","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N55U_D1","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N66U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N12U_C1","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N12U_D1","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N14U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N14U_B1","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N16","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC51","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC750","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC52U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC55U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-AC56U","source":"CNA: twcert","vendor":"ASUS","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"earlier","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"DSL-N10_C1","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N10_D1","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N10P_C1","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N12E_C1","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N16P","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-N16U","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-AC52","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"DSL-AC55","source":"CNA: twcert","vendor":"ASUS","versions":[{"status":"affected","version":"All"}]},{"defaultStatus":"unaffected","product":"dsl-n66u_firmware","source":"ADP: CISA-ADP","vendor":"asus","versions":[{"lessThan":"1.1.2.3_792","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"dsl-n12u_c1_firmware","source":"ADP: CISA-ADP","vendor":"asus","versions":[{"lessThan":"1.1.2.3_807","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"dsl-ac55_firmware","source":"ADP: CISA-ADP","vendor":"asus","versions":[{"lessThan":"1.1.2.3_999","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"dsl-n10_c1_firmware","source":"ADP: CISA-ADP","vendor":"asus","versions":[{"lessThanOrEqual":"*","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2024-3912","cwes":["CWE-434"],"description":"Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.","epss":{"date":"2026-11-03","percentile":0.63528,"score":0.01022},"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: twcert","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":9.8,"severity":"critical","source":"NVD: twcert@cert.org.tw","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793744243200,"publishedAt":1718357340161,"references":[{"source":"CNA: twcert","tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"},{"source":"CNA: twcert","tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"},{"source":"ADP: CVE","tags":["third-party-advisory","x_transferred"],"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"twcert@cert.org.tw","tags":[],"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"twcert@cert.org.tw","tags":[],"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html"}],"remediation":[{"kind":"fix","source":"CNA: twcert","text":"Update following models to version 1.1.2.3_792 or later：\nDSL-N17U, DSL-N55U_C1, DSL-N55U_D1, DSL-N66U\n\nUpdate following models to version 1.1.2.3_807 or later：\nDSL-N12U_C1, DSL-N12U_D1, DSL-N14U, DSL-N14U_B1\n\nUpdate following models to version 1.1.2.3_999 or later：\nDSL-N16, DSL-AC51, DSL-AC750, DSL-AC52U, DSL-AC55U, DSL-AC56U\n\nThe following models are no longer maintained, and it is recommended to retire and replace them.\nDSL-N10_C1, DSL-N10_D1, DSL-N10P_C1, DSL-N12E_C1, ,DSL-N16P, DSL-N16U, DSL-AC52, DSL-AC55\n\n\nIf replacement is not possible in the short term, it is recommended to disable remote access (Web access from WAN), virtual servers (Port forwarding), DDNS, VPN server, DMZ, and port trigger."}],"revision":"6a2d540f981ed03abd57b3d6a62dca38edcdfa2557fe82404b347118eaeaa9a7","sources":[{"modifiedAt":1793742758285,"name":"CNA: twcert","retrievedAt":1793743974541,"url":"https://www.cve.org/CVERecord?id=CVE-2024-3912"},{"modifiedAt":1793744243200,"name":"NVD","retrievedAt":1793751355741,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3912"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793744001289,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-3912"}],"ssvc":{"assessedAt":1719546921843,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"ASUS Router - Upload arbitrary firmware","updatedAt":1793751355741}