CVE-2024-3912: ASUS DSL-AC51

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.

Affected products

• ASUS DSL-AC51
• ASUS DSL-AC52: any version
• ASUS DSL-AC52U
• ASUS DSL-AC55: any version
• ASUS DSL-AC55 Firmware: before 1.1.2.3_999 (fixed in 1.1.2.3_999)
• ASUS DSL-AC55U
• ASUS DSL-AC56U
• ASUS DSL-AC750
• ASUS DSL-n10 c1: any version
• ASUS DSL-n10 c1 Firmware: any version
• ASUS DSL-n10 d1: any version
• ASUS DSL-n10p c1: any version
• ASUS DSL-n12e c1: any version
• ASUS DSL-n12u c1
• ASUS DSL-n12u c1 Firmware: before 1.1.2.3_807 (fixed in 1.1.2.3_807)
• ASUS DSL-n12u d1
• ASUS DSL-n14u
• ASUS DSL-n14u b1
• ASUS DSL-n16
• ASUS DSL-n16p: any version
• ASUS DSL-n16u: any version
• ASUS DSL-n17u
• ASUS DSL-n55u c1
• ASUS DSL-n55u d1
• ASUS DSL-n66u
• and 1 more

Published 2024-06-14. Last modified 2026-06-17.