CVE-2024-12912

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.asus.com/content/asus-product-security-advisory/

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de inserción de entrada incorrecta en AiCloud en ciertos modelos de routers puede provocar la ejecución de comandos arbitrarios. Consulte la sección 'Vulnerabilidad de ASUS Router AiCloud del 01/02/2025' en el Aviso de seguridad de ASUS para obtener más información.

02 Jan 2025, 09:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-01-02 09:15

Updated : 2026-06-17 07:00

NVD link : CVE-2024-12912

Mitre link : CVE-2024-12912

CVE.ORG link : CVE-2024-12912

JSON object : View

Products Affected

No product.

CWE

CWE-20

Improper Input Validation

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2024-12912", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-12912", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-01-06T20:33:14.419275Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "affectedData": [{"vendor": "ASUS", "modules": ["AiCloud"], "product": "Router", "versions": [{"status": "affected", "version": "3.0.0.4_382 series", "versionType": "custom"}, {"status": "affected", "version": "3.0.0.4_386 series", "versionType": "custom"}, {"status": "affected", "version": "3.0.0.4_388 series", "versionType": "custom"}, {"status": "affected", "version": "3.0.0.6_102 series", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-01-02T09:15:17.470", "references": [{"url": "https://www.asus.com/content/asus-product-security-advisory/", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.\nRefer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information."}, {"lang": "es", "value": "Una vulnerabilidad de inserci\u00f3n de entrada incorrecta en AiCloud en ciertos modelos de routers puede provocar la ejecuci\u00f3n de comandos arbitrarios. Consulte la secci\u00f3n 'Vulnerabilidad de ASUS Router AiCloud del 01/02/2025' en el Aviso de seguridad de ASUS para obtener m\u00e1s informaci\u00f3n."}], "lastModified": "2026-06-17T07:00:45.070", "sourceIdentifier": "54bf65a7-a193-42d2-b1ba-8e150d3c35e1"}