Vulnerability Intelligence Report
CVE-2021-37315
Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the source for COPY and MOVE operations.
No Active Exploit Signals
CVSS Base Score
9.1
CRITICAL
Exploitability:3.9
Impact Score:5.2
EPSS Probability:1.11%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-706 ↗CWE-706 Use of Incorrectly-Resolved Name or Reference
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asus | rt-ac68u_firmware | all |
| asus | rt-ac68u | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.113%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2021-07-21T00:00:00 |
| Published | 2023-02-03T00:00:00 |
| Last Updated | 2025-03-26T20:44:18 |
Community Chatter & Buzz