Sign-up

ID

VAR-202102-1432


CVE

CVE-2021-3229


TITLE

ASUSWRT ASUS RT-AX3000  Firmware vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2021-003388

DESCRIPTION

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error. ASUSWRT ASUS RT-AX3000 There is an unspecified vulnerability in the firmware.Denial of service (DoS) It may be put into a state. ASUS RT-AX3000 is a piece of firmware from ASUS, Taiwan, China that runs in its routers

Trust: 2.25

sources: NVD: CVE-2021-3229 // JVNDB: JVNDB-2021-003388 // CNVD: CNVD-2021-73652 // VULMON: CVE-2021-3229

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-73652

AFFECTED PRODUCTS

vendor:asusmodel:rt-ax3000scope:lteversion:3.0.0.4.384_10177

Trust: 1.0

vendor:asustek computermodel:rt-ax3000scope: - version: -

Trust: 0.8

vendor:asustek computermodel:rt-ax3000scope:lteversion:rt-ax3000 firmware 3.0.0.4.384_10177 and earlier

Trust: 0.8

vendor:asustek computermodel:rt-ax3000scope:eqversion: -

Trust: 0.8

vendor:asusmodel:rt-ax3000 <=3.0.0.4.384 10177scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-73652 // JVNDB: JVNDB-2021-003388 // NVD: CVE-2021-3229

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-3229
value: HIGH

Trust: 1.0

NVD: CVE-2021-3229
value: HIGH

Trust: 0.8

CNVD: CNVD-2021-73652
value: HIGH

Trust: 0.6

CNNVD: CNNVD-202102-552
value: HIGH

Trust: 0.6

VULMON: CVE-2021-3229
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2021-3229
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

CNVD: CNVD-2021-73652
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2021-3229
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2021-3229
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2021-73652 // VULMON: CVE-2021-3229 // JVNDB: JVNDB-2021-003388 // CNNVD: CNNVD-202102-552 // NVD: CVE-2021-3229

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-003388 // NVD: CVE-2021-3229

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202102-552

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202102-552

PATCH

title:ASUSWRT Software Features ASUSurl:https://dlcdnimgs.asus.com/websites/global/productcustomizedTab/562/ASUSWRT%20portal%20feature.pdf

Trust: 0.8

title:Patch for ASUS RT-AX3000 Denial of Service Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/292891

Trust: 0.6

title:ASUSWRT ASUS RT-AX3000 Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=141723

Trust: 0.6

title:PoCurl:https://github.com/Jonathan-Elias/PoC

Trust: 0.1

title:PoC-in-GitHuburl:https://github.com/developer3000S/PoC-in-GitHub

Trust: 0.1

sources: CNVD: CNVD-2021-73652 // VULMON: CVE-2021-3229 // JVNDB: JVNDB-2021-003388 // CNNVD: CNNVD-202102-552

EXTERNAL IDS

db:NVDid:CVE-2021-3229

Trust: 3.1

db:JVNDBid:JVNDB-2021-003388

Trust: 0.8

db:CNVDid:CNVD-2021-73652

Trust: 0.6

db:CNNVDid:CNNVD-202102-552

Trust: 0.6

db:VULMONid:CVE-2021-3229

Trust: 0.1

sources: CNVD: CNVD-2021-73652 // VULMON: CVE-2021-3229 // JVNDB: JVNDB-2021-003388 // CNNVD: CNNVD-202102-552 // NVD: CVE-2021-3229

REFERENCES

url:https://github.com/fullbbadda1208/cve-2021-3229

Trust: 2.5

url:https://nvd.nist.gov/vuln/detail/cve-2021-3229

Trust: 2.0

url:https://dlcdnimgs.asus.com/websites/global/productcustomizedtab/562/asuswrt%20portal%20feature.pdf

Trust: 1.7

url:https://www.asus.com/us/asuswrt/

Trust: 1.7

url:https://github.com/fullbbadda1208/asuswrt-denial_of_service/blob/master/vulnerability%20report.md

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://github.com/jonathan-elias/poc

Trust: 0.1

sources: CNVD: CNVD-2021-73652 // VULMON: CVE-2021-3229 // JVNDB: JVNDB-2021-003388 // CNNVD: CNNVD-202102-552 // NVD: CVE-2021-3229

SOURCES

db:CNVDid:CNVD-2021-73652
db:VULMONid:CVE-2021-3229
db:JVNDBid:JVNDB-2021-003388
db:CNNVDid:CNNVD-202102-552
db:NVDid:CVE-2021-3229

LAST UPDATE DATE

2024-11-23T22:11:06.553000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-73652date:2021-09-26T00:00:00
db:VULMONid:CVE-2021-3229date:2021-02-10T00:00:00
db:JVNDBid:JVNDB-2021-003388date:2021-10-26T05:30:00
db:CNNVDid:CNNVD-202102-552date:2021-02-18T00:00:00
db:NVDid:CVE-2021-3229date:2024-11-21T06:21:08.920

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-73652date:2021-09-26T00:00:00
db:VULMONid:CVE-2021-3229date:2021-02-05T00:00:00
db:JVNDBid:JVNDB-2021-003388date:2021-10-26T00:00:00
db:CNNVDid:CNNVD-202102-552date:2021-02-05T00:00:00
db:NVDid:CVE-2021-3229date:2021-02-05T22:15:13.830