Vulnerability in Asus Gt Ax11000
CVSS score
9.8
EPSS probability
%6.5
Risk score
0.6
Published
4 y ago
Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.
Impact on My Inventory
Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.
Checking session…
Vulnerability description
DayBreach CVE AI Research
CVE-2021-41435 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
IMPACT: Affected Products and Software
Affected Products
The following products are affected by CVE-2021-41435 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | asus | gt-ax11000 firmware | View |
| 2 | asus | gt-ax11000 | View |
| 3 | asus | rt-ax3000 firmware | View |
| 4 | asus | rt-ax3000 | View |
| 5 | asus | rt-ax55 firmware | View |
| 6 | asus | rt-ax55 | View |
| 7 | asus | rt-ax56u firmware | View |
| 8 | asus | rt-ax56u | View |
| 9 | asus | rt-ax56u v2 firmware | View |
| 10 | asus | rt-ax56u v2 | View |
| 11 | asus | rt-ax58u firmware | View |
| 12 | asus | rt-ax58u | View |
| 13 | asus | rt-ax82u firmware | View |
| 14 | asus | rt-ax82u | View |
| 15 | asus | rt-ax82u gundam edition firmware | View |
| 16 | asus | rt-ax82u gundam edition | View |
| 17 | asus | rt-ax86u firmware | View |
| 18 | asus | rt-ax86u | View |
| 19 | asus | rt-ax86s firmware | View |
| 20 | asus | rt-ax86s | View |
| 21 | asus | rt-ax86u zaku ii edition firmware | View |
| 22 | asus | rt-ax86u zaku ii edition | View |
| 23 | asus | rt-ax88u firmware | View |
| 24 | asus | rt-ax88u | View |
| 25 | asus | rt-ax92u firmware | View |
| 26 | asus | rt-ax92u | View |
| 27 | asus | tuf gaming ax3000 firmware | View |
| 28 | asus | tuf gaming ax3000 | View |
| 29 | asus | tuf-ax5400 firmware | View |
| 30 | asus | tuf-ax5400 | View |
| 31 | asus | zenwifi xd6 firmware | View |
| 32 | asus | zenwifi xd6 | View |
| 33 | asus | zenwifi ax (xt8) firmware | View |
| 34 | asus | zenwifi ax (xt8) | View |
| 35 | asus | rt-ax68u firmware | View |
| 36 | asus | rt-ax68u | View |
RED HAT CSAF/VEX: Product Impact Check
SCORING: CVSS from Multiple Sources
CVSS Scores
The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 10.0 | CVSS V2 | — | AV:N/AC:L/Au:N/C:C/I:C/A:C | NVD |
| 9.8 | CVSS V31 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD |
Patch and Remediation Guide
Solution & Remediation Advisory
İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.
Public exploit and active exploitation status
Verified exploit intelligence
No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.
Weakness Classification and Attack Patterns (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-41435 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-41435 weaknesses.
Attack Vector and Accessibility
Official Sources and Advisories
Similar Vulnerabilities
Vulnerability in Asus Gt Ax11000
Vulnerability in Asus Live Update
Buffer overflow in Asus Rt Ac68u
Buffer overflow in Asus Rt Ac68u Firmware
Vulnerability in ASUS Router
Vulnerability in ASUS Router
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2021-41435"