CVE-2024-3080: ASUS Rt-AC68U

Critical severity, CVSS 9.8. EPSS: 43.5% chance of exploitation in the next 30 days.

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

Affected products

ASUS Rt-AC68U
ASUS Rt-AC68U Firmware: before 3.0.0.4.386_51668 (fixed in 3.0.0.4.386_51668)
ASUS Rt-AC86U
ASUS Rt-AC86U Firmware: before 3.0.0.4.386_51915 (fixed in 3.0.0.4.386_51915)
ASUS Rt-AX57
ASUS Rt-AX57 Firmware: before 3.0.0.4.386_52294 (fixed in 3.0.0.4.386_52294)
ASUS Rt-AX58U
ASUS Rt-AX58U Firmware: before 3.0.0.4.388_24762 (fixed in 3.0.0.4.388_24762)
ASUS Rt-AX88U
ASUS Rt-AX88U Firmware: before 3.0.0.4.388_24209 (fixed in 3.0.0.4.388_24209)
ASUS Zenwifi XT8
ASUS Zenwifi XT8 Firmware: before 3.0.0.4.388_24609 (fixed in 3.0.0.4.388_24609)
ASUS Zenwifi XT8 v2
ASUS Zenwifi XT8 v2 Firmware: before 3.0.0.4.388_24609 (fixed in 3.0.0.4.388_24609)

Published 2024-06-14. Last modified 2026-06-17.