ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication
Priority LOW 28CWE-799Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.
Why it matters now
EPSS 0.02117 81st percentileScored 2026-11-07
Fix Fixed GT-AXE11000 (ASUS): 3.0.0.4.386.45898RT-AX3000 (ASUS): 3.0.0.4.386.45898+3 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASUS | GT-AXE11000 | before 3.0.0.4.386.45898 | 3.0.0.4.386.45898 | Patch available | CNA |
| ASUS | RT-AX3000 | before 3.0.0.4.386.45898 | 3.0.0.4.386.45898 | Patch available | CNA |
| ASUS | RT-AX55 | before 3.0.0.4.386.45898 | 3.0.0.4.386.45898 | Patch available | CNA |
| ASUS | RT-AX58U | before 3.0.0.4.386.45898 | 3.0.0.4.386.45898 | Patch available | CNA |
| ASUS | TUF-AX3000 | before 3.0.0.4.386.45898 | 3.0.0.4.386.45898 | Patch available | CNA |
- GT-AXE11000 VendorASUS Affected before 3.0.0.4.386.45898 Fixed in 3.0.0.4.386.45898 Patch available CNA
- RT-AX3000 VendorASUS Affected before 3.0.0.4.386.45898 Fixed in 3.0.0.4.386.45898 Patch available CNA
- RT-AX55 VendorASUS Affected before 3.0.0.4.386.45898 Fixed in 3.0.0.4.386.45898 Patch available CNA
- RT-AX58U VendorASUS Affected before 3.0.0.4.386.45898 Fixed in 3.0.0.4.386.45898 Patch available CNA
- TUF-AX3000 VendorASUS Affected before 3.0.0.4.386.45898 Fixed in 3.0.0.4.386.45898 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:gt-axe11000_firmware:*:*:*:*:*:*:*:* | before 3.0.0.4.386.45898 | Vulnerable | ASUS |
| cpe:2.3:h:asus:gt-axe11000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:* | before 3.0.0.4.386.45898 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rt-ax55_firmware:*:*:*:*:*:*:*:* | before 3.0.0.4.386.45898 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:rt-ax58u_firmware:*:*:*:*:*:*:*:* | before 3.0.0.4.386.45898 | Vulnerable | ASUS |
| cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:tuf-ax3000_firmware:*:*:*:*:*:*:*:* | before 3.0.0.4.386.45898 | Vulnerable | ASUS |
| cpe:2.3:h:asus:tuf-ax3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:gt-axe11000_firmware:*:*:*:*:*:*:*:* Versions before 3.0.0.4.386.45898 Vulnerable ·ASUS
- cpe:2.3:h:asus:gt-axe11000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:* Versions before 3.0.0.4.386.45898 Vulnerable ·ASUS
- cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rt-ax55_firmware:*:*:*:*:*:*:*:* Versions before 3.0.0.4.386.45898 Vulnerable ·ASUS
- cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:rt-ax58u_firmware:*:*:*:*:*:*:*:* Versions before 3.0.0.4.386.45898 Vulnerable ·ASUS
- cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:tuf-ax3000_firmware:*:*:*:*:*:*:*:* Versions before 3.0.0.4.386.45898 Vulnerable ·ASUS
- cpe:2.3:h:asus:tuf-ax3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
- Fix · CNA GT-AXE11000 (ASUS) Fixed in 3.0.0.4.386.45898
- Fix · CNA RT-AX3000 (ASUS) Fixed in 3.0.0.4.386.45898
- Fix · CNA RT-AX55 (ASUS) Fixed in 3.0.0.4.386.45898
- Fix · CNA RT-AX58U (ASUS) Fixed in 3.0.0.4.386.45898
- Fix · CNA TUF-AX3000 (ASUS) Fixed in 3.0.0.4.386.45898
Timeline
- 2026-10-02 Threatist record created from CVE-2021-37910
- 2026-10-03 Alias added: GHSA-564h-q8m3-2phw
References
Sources
- CVE-2021-37910 · CVE Program
- CVE-2021-37910 · NVD
- FIRST EPSS
- GHSA-564h-q8m3-2phw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences