{"id":"CVE-2024-3912","title":"Certain models of ASUS routers have an arbitrary firmware upload vulnerability","summary":"Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-434"],"vendor":"ASUS","product":"DSL-N17U","affected":["DSL-N17U >= earlier < 1.1.2.3_792","DSL-N55U_C1 >= earlier < 1.1.2.3_792","DSL-N55U_D1 >= earlier < 1.1.2.3_792","DSL-N66U >= earlier < 1.1.2.3_792","DSL-N12U_C1 >= earlier < 1.1.2.3_807","DSL-N12U_D1 >= earlier < 1.1.2.3_807","DSL-N14U >= earlier < 1.1.2.3_807","DSL-N14U_B1 >= earlier < 1.1.2.3_807","DSL-N16 >= earlier < 1.1.2.3_999","DSL-AC51 >= earlier < 1.1.2.3_999","DSL-AC750 >= earlier < 1.1.2.3_999","DSL-AC52U >= earlier < 1.1.2.3_999","DSL-AC55U >= earlier < 1.1.2.3_999","DSL-AC56U >= earlier < 1.1.2.3_999","DSL-N10_C1 All","DSL-N10_D1 All","DSL-N10P_C1 All","DSL-N12E_C1 All","DSL-N16P All","DSL-N16U All","DSL-AC52 All","DSL-AC55 All"],"published":"2024-06-14","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:23.200","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3912","references":[{"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html","label":"twcert@cert.org.tw"},{"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html","label":"twcert@cert.org.tw"},{"url":"https://www.twcert.org.tw/en/cp-139-7876-396bd-2.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.twcert.org.tw/tw/cp-132-7875-872d3-1.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2024-06-28T03:55:21.843924Z"},"epss":0.01022,"epssPercentile":0.6369,"exploits":{"github":1,"githubRepos":["https://github.com/H4rk3nz0/CVE-2024-3912"],"checkedAt":"2026-11-07T17:44:40.754Z"},"exploitAvailable":true,"ingestedAt":"2026-11-05T06:38:03.568Z","slug":"CVE-2024-3912","body":"## Overview\n\nCertain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}