CVE-2024-11985

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.asus.com/content/asus-product-security-advisory/

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de validación de entrada incorrecta provoca fallos del dispositivo en ciertos modelos de enrutadores ASUS. Consulta la sección "Validación de entrada incorrecta del enrutador ASUS el 3 de diciembre de 2024" en el Aviso de seguridad de ASUS para obtener más información.

04 Dec 2024, 02:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-04 02:15

Updated : 2026-06-17 06:58

NVD link : CVE-2024-11985

Mitre link : CVE-2024-11985

CVE.ORG link : CVE-2024-11985

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2024-11985", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-11985", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-04T14:05:35.472193Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 0.7}]}, "affected": [{"source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "affectedData": [{"vendor": "ASUS", "product": "RT-AX55", "versions": [{"status": "affected", "version": "before 3.0.0.4.386_52332", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX55 V2", "versions": [{"status": "affected", "version": "before 3.0.0.4.386_52332", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX56U", "versions": [{"status": "affected", "version": "before 3.0.0.4.386_51712", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX56U_V2", "versions": [{"status": "affected", "version": "before 3.0.0.4.386_52332", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX57", "versions": [{"status": "affected", "version": "before 3.0.0.4.386_52332", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX58U", "versions": [{"status": "affected", "version": "before 3.0.0.4_388_25127", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "ASUS", "product": "RT-AX58U V2", "versions": [{"status": "affected", "version": "before 3.0.0.4_388_25127", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2024-12-04T02:15:04.237", "references": [{"url": "https://www.asus.com/content/asus-product-security-advisory/", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An improper input validation vulnerability leads to device crashes in certain ASUS router models. \nRefer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information."}, {"lang": "es", "value": " Una vulnerabilidad de validaci\u00f3n de entrada incorrecta provoca fallos del dispositivo en ciertos modelos de enrutadores ASUS. Consulta la secci\u00f3n \"Validaci\u00f3n de entrada incorrecta del enrutador ASUS el 3 de diciembre de 2024\" en el Aviso de seguridad de ASUS para obtener m\u00e1s informaci\u00f3n."}], "lastModified": "2026-06-17T06:58:50.133", "sourceIdentifier": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}