Sign-up

ID

VAR-202302-0263


CVE

CVE-2021-37317


TITLE

ASUS RT-AC68U  Path traversal vulnerability in router firmware

Trust: 0.8

sources: JVNDB: JVNDB-2021-020123

DESCRIPTION

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations. ASUS RT-AC68U A path traversal vulnerability exists in router firmware.Information is tampered with and service operation is interrupted (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2021-37317 // JVNDB: JVNDB-2021-020123 // VULMON: CVE-2021-37317

AFFECTED PRODUCTS

vendor:asusmodel:rt-ac68uscope:ltversion:3.0.0.4.386.41634

Trust: 1.0

vendor:asustek computermodel:rt-ac68uscope:eqversion: -

Trust: 0.8

vendor:asustek computermodel:rt-ac68uscope:eqversion:rt-ac68u firmware 3.0.0.4.386.41634

Trust: 0.8

sources: JVNDB: JVNDB-2021-020123 // NVD: CVE-2021-37317

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-37317
value: CRITICAL

Trust: 1.0

NVD: CVE-2021-37317
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-202302-241
value: CRITICAL

Trust: 0.6

nvd@nist.gov: CVE-2021-37317
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.2
version: 3.1

Trust: 1.0

NVD: CVE-2021-37317
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2021-020123 // CNNVD: CNNVD-202302-241 // NVD: CVE-2021-37317

PROBLEMTYPE DATA

problemtype:CWE-22

Trust: 1.0

problemtype:Path traversal (CWE-22) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-020123 // NVD: CVE-2021-37317

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202302-241

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-202302-241

PATCH

title:top pageurl:https://www.asus.com/jp/

Trust: 0.8

sources: JVNDB: JVNDB-2021-020123

EXTERNAL IDS

db:NVDid:CVE-2021-37317

Trust: 3.3

db:JVNDBid:JVNDB-2021-020123

Trust: 0.8

db:CNNVDid:CNNVD-202302-241

Trust: 0.6

db:VULMONid:CVE-2021-37317

Trust: 0.1

sources: VULMON: CVE-2021-37317 // JVNDB: JVNDB-2021-020123 // CNNVD: CNNVD-202302-241 // NVD: CVE-2021-37317

REFERENCES

url:https://robertchen.cc/blog/2021/03/31/asus-rce

Trust: 2.5

url:https://nvd.nist.gov/vuln/detail/cve-2021-37317

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2021-37317/

Trust: 0.6

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2021-37317 // JVNDB: JVNDB-2021-020123 // CNNVD: CNNVD-202302-241 // NVD: CVE-2021-37317

SOURCES

db:VULMONid:CVE-2021-37317
db:JVNDBid:JVNDB-2021-020123
db:CNNVDid:CNNVD-202302-241
db:NVDid:CVE-2021-37317

LAST UPDATE DATE

2024-08-14T15:32:19.117000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2021-37317date:2023-02-03T00:00:00
db:JVNDBid:JVNDB-2021-020123date:2023-09-13T01:15:00
db:CNNVDid:CNNVD-202302-241date:2023-02-14T00:00:00
db:NVDid:CVE-2021-37317date:2023-02-13T14:58:09.480

SOURCES RELEASE DATE

db:VULMONid:CVE-2021-37317date:2023-02-03T00:00:00
db:JVNDBid:JVNDB-2021-020123date:2023-09-13T00:00:00
db:CNNVDid:CNNVD-202302-241date:2023-02-03T00:00:00
db:NVDid:CVE-2021-37317date:2023-02-03T18:15:12.513