Sign-up

ID

VAR-202104-1666


CVE

CVE-2021-3128


TITLE

ASUS RT-AX3000 Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202104-652

DESCRIPTION

In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set

Trust: 0.99

sources: NVD: CVE-2021-3128 // VULMON: CVE-2021-3128

AFFECTED PRODUCTS

vendor:asusmodel:rt-ax55scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax3000scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax58uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac85uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac1750 b1scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac88uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac68uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac5300scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac66u b1scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac1900scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac68pscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac3100scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax82uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac1900uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:zenwifi ax \scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax88uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax86uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac68wscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax55scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac1900pscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax58uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac2900scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac58uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac85uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac88uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax68uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac68rwscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac1750 b1scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac86uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac66u b1scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax56uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac65uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac68rscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax3000scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac68pscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac3100scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac68wscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac68uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax88uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac5300scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac1900scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac1900pscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac2900scope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac58uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax68uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac68rwscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ax82uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ac68rscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac86uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:zenwifi ax \scope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax56uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac65uscope:ltversion:9.0.0.4.386.41994

Trust: 1.0

vendor:asusmodel:rt-ac1900uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

vendor:asusmodel:rt-ax86uscope:ltversion:3.0.0.4.386.42095

Trust: 1.0

sources: NVD: CVE-2021-3128

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-3128
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202104-652
value: HIGH

Trust: 0.6

VULMON: CVE-2021-3128
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-3128
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

nvd@nist.gov: CVE-2021-3128
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

sources: VULMON: CVE-2021-3128 // CNNVD: CNNVD-202104-652 // NVD: CVE-2021-3128

PROBLEMTYPE DATA

problemtype:CWE-834

Trust: 1.0

sources: NVD: CVE-2021-3128

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202104-652

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202104-652

PATCH

title:ASUS router Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=147226

Trust: 0.6

sources: CNNVD: CNNVD-202104-652

EXTERNAL IDS

db:NVDid:CVE-2021-3128

Trust: 1.7

db:CNNVDid:CNNVD-202104-652

Trust: 0.6

db:VULMONid:CVE-2021-3128

Trust: 0.1

sources: VULMON: CVE-2021-3128 // CNNVD: CNNVD-202104-652 // NVD: CVE-2021-3128

REFERENCES

url:https://www.asus.com/supportonly/rt-ac3100/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac1900p/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax88u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac68rw/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac65u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/whole-home-mesh-wifi-system/zenwifi-wifi-systems/asus-zenwifi-ax-xt8-/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax82u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac2900/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac1900u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac1900/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax86u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac58u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax58u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac86u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac1750_b1/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax3000/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-routers/asus-wifi-routers/rt-ac66u-b1/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax68u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac88u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax56u/helpdesk_bios/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac5300/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac68w/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac68p/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac68u/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac68r/helpdesk_download/

Trust: 1.7

url:https://www.asus.com/supportonly/rt-ac85u/helpdesk_download/

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-3128

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/834.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2021-3128 // CNNVD: CNNVD-202104-652 // NVD: CVE-2021-3128

SOURCES

db:VULMONid:CVE-2021-3128
db:CNNVDid:CNNVD-202104-652
db:NVDid:CVE-2021-3128

LAST UPDATE DATE

2024-11-23T22:47:39.136000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2021-3128date:2021-04-20T00:00:00
db:CNNVDid:CNNVD-202104-652date:2021-04-22T00:00:00
db:NVDid:CVE-2021-3128date:2024-11-21T06:20:56.883

SOURCES RELEASE DATE

db:VULMONid:CVE-2021-3128date:2021-04-12T00:00:00
db:CNNVDid:CNNVD-202104-652date:2021-04-12T00:00:00
db:NVDid:CVE-2021-3128date:2021-04-12T19:15:14.830