Vulnerability Intelligence Report
CVE-2021-3128
In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:2.18%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asus | zenwifi_ax_\(xt8\)_firmware | all |
| asus | zenwifi_ax_\(xt8\) | all |
| asus | rt-ax3000_firmware | all |
| asus | rt-ax3000 | all |
| asus | rt-ax55_firmware | all |
| asus | rt-ax55 | all |
| asus | rt-ax56u_firmware | all |
| asus | rt-ax56u | all |
| asus | rt-ax58u_firmware | all |
| asus | rt-ax58u | all |
| asus | rt-ax68u_firmware | all |
| asus | rt-ax68u | all |
| asus | rt-ax82u_firmware | all |
| asus | rt-ax82u | all |
| asus | rt-ax86u_firmware | all |
| asus | rt-ax86u | all |
| asus | rt-ax88u_firmware | all |
| asus | rt-ax88u | all |
| asus | rt-ac66u_b1_firmware | all |
| asus | rt-ac66u_b1 | all |
| asus | rt-ac1750_b1_firmware | all |
| asus | rt-ac1750_b1 | all |
| asus | rt-ac1900_firmware | all |
| asus | rt-ac1900 | all |
| asus | rt-ac1900p_firmware | all |
| asus | rt-ac1900p | all |
| asus | rt-ac1900u_firmware | all |
| asus | rt-ac1900u | all |
| asus | rt-ac2900_firmware | all |
| asus | rt-ac2900 | all |
| asus | rt-ac3100_firmware | all |
| asus | rt-ac3100 | all |
| asus | rt-ac5300_firmware | all |
| asus | rt-ac5300 | all |
| asus | rt-ac58u_firmware | all |
| asus | rt-ac58u | all |
| asus | rt-ac65u_firmware | all |
| asus | rt-ac65u | all |
| asus | rt-ac68p_firmware | all |
| asus | rt-ac68p | all |
| asus | rt-ac68r_firmware | all |
| asus | rt-ac68r | all |
| asus | rt-ac68rw_firmware | all |
| asus | rt-ac68rw | all |
| asus | rt-ac68u_firmware | all |
| asus | rt-ac68u | all |
| asus | rt-ac68w_firmware | all |
| asus | rt-ac68w | all |
| asus | rt-ac85u_firmware | all |
| asus | rt-ac85u | all |
| asus | rt-ac86u_firmware | all |
| asus | rt-ac86u | all |
| asus | rt-ac88u_firmware | all |
| asus | rt-ac88u | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.184%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-01-12T00:00:00 |
| Published | 2021-04-12T17:41:07 |
| Last Updated | 2024-08-03T16:45:51 |
Community Chatter & Buzz