Skip to content
Fencer Vulns
high 7.2

CVE-2024-0401 json

ASUS OVPN RCE

published 2024-05-20 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-16197

cvss
7.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.7%
EPSS 0.7% chance of exploitation in 30 days, percentile 54%
public exploits
0
none known

Summary

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

Patch / fix

  • ASUS ExpertWiFi 3.0.0.6.102_44544
  • ASUS RT-AX55 3.0.0.4.386_52303
  • ASUS RT-AX58U 3.0.0.4.388_24762
  • ASUS RT-AC67U 3.0.0.4.386_51685
  • ASUS RT-AC68R 3.0.0.4.386_51685
  • ASUS RT-AC68U 3.0.0.4.386_51685
  • ASUS RT-AX86 Series 3.0.0.4.388_24243
  • ASUS RT-AC86U 3.0.0.4.386_51925
  • ASUS RT-AX88U 3.0.0.4.388_24209
  • ASUS RT-AX3000 3.0.0.4.388_24762
  • asus rt-ax86_series 3.0.0.4.388_24243
  • asus rt-ac88u 3.0.0.4.388_24209
  • asus rt-ac68p 3.0.0.4.386_51685
  • asus rt-ac1900 3.0.0.4.386_51685
  • asus rt-ac1900u 3.0.0.4.386_51685
  • asus rt-ac2900 3.0.0.4.386_51925
  • asus zenwifi_xt8 3.0.0.4.388_24621

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.73% chance of exploitation in the next 30 days, higher than 54% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • ASUS ExpertWiFi
  • ASUS RT-AX55
  • ASUS RT-AX58U
  • ASUS RT-AC67U
  • ASUS RT-AC68R
  • ASUS RT-AC68U
  • ASUS RT-AX86 Series
  • ASUS RT-AC86U
  • ASUS RT-AX88U
  • ASUS RT-AX3000
  • asus rt-ax86_series
  • asus rt-ac88u
  • asus rt-ac68p
  • asus rt-ac1900
  • asus rt-ac1900u
  • asus rt-ac2900
  • asus zenwifi_xt8

Classification

Weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.