CVE-2021-37315: ASUS Rt-AC68U Firmware

Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations.

Affected products

• ASUS Rt-AC68U Firmware: before 3.0.0.4.386.41634 (fixed in 3.0.0.4.386.41634)

Published 2023-02-03. Last modified 2026-06-17.