CVE-2024-3079ASUS Router - Stack-based Buffer Overflow
- 7.2HighCVSS base score
- 0.83%Exploitation in 30 daysEPSS · top 42% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privileges to execute arbitrary commands on the device.
Timeline
ID reserved
By twcert
- 3 months later
· 3 months later
Published
- 48 days later
· 48 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| twcertCNA (assigner) | 3.1 | High7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.83% · top 42% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.
Affected products
- affected earlier – ≤ 3.0.0.4.388_24609
- affected earlier – ≤ 3.0.0.4.388_24609
- affected earlier – ≤ 3.0.0.4.388_24198
- affected earlier – ≤ 3.0.0.4.388_23925
- affected earlier – ≤ 3.0.0.4.386_52294
- affected earlier – ≤ 3.0.0.4.386_51915
- affected earlier – ≤ 3.0.0.4.386_51668
What to do
Solution: Update ZenWiFi XT8 to version 3.0.0.4.388_24621 or later Update ZenWiFi XT8 V2 to version 3.0.0.4.388_24621 or later Update RT-AX88U to version 3.0.0.4.388_24209 or later Update RT-AX58U to version 3.0.0.4.388_24762 or later Update RT-AX57 to version 3.0.0.4.386_52303 or later Update RT-AC86U to version 3.0.0.4.386_51925 or later Update RT-AC68U to version 3.0.0.4.386_51685 or later
References
References2
- https://www.twcert.org.tw/tw/cp-132-7857-5726f-1.html (opens in a new tab)third-party-advisoryx_transferred
- https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html (opens in a new tab)third-party-advisoryx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-31685 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-3079)Record last updated .