ASUS Security Issues

[coxhaus]

I came across these today.

 

[DJones]

CVE-2024-3080, CVE-2024-3079, CVE-2024-3912

Have been discussed other places on the forums use the search functionality to avoid double posts.

CVE-2024-31162 is unique. [Download Master vulnerability]
CVE-2024-31161 is unique. [Download master vulnerability]
CVE-2024-31163 is unique. [Download master vulnerability]

Add these to your post tags.

 

[DJones]

I’d long abandoned using any of asus’s optional features that use usb. The reason is they still use optware which conflicts with entware. Opkg/Ipkg is obsolete. Note opkg is still the command to install alternative entware not from amtm.

 

[Deleted member 48162]

Some models involved are mentioned here. Hope there will be updates on the issue. As I'm happy owner of RT-AX68U it was pleasure to know this router happily avoided this near miss.

 

[jerry6]

old news fixed long ago in Merlin FW , That is why I never use Asus extras or FW