CVE-2021-37910

ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication

Published Nov 12, 2021 CVSS 3.1 · 3.7 Low EPSS 2.1% KEV · Not listed
Description
ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.

Remediation

Vendor Solution

Update Routes firmware to last version: ASUS GT-AXE11000 v3.0.0.4.386.45898 ASUS RT-AX3000 v3.0.0.4.386.45898 ASUS RT-AX55 v3.0.0.4.386.45898 ASUS RT-AX58U v3.0.0.4.386.45898 ASUS TUF-AX3000 v3.0.0.4.386.45898

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-24388 ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.
History

No history.