Read the docs
TI-2024-00363 Aliases CVE-2024-0401GHSA-qxjr-363m-qwfv

ASUS OVPN RCE

Priority LOW 35CWE-78Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00735 54th percentileScored 2026-11-07
Fix Fixed ExpertWiFi (ASUS): 3.0.0.6.102_44544RT-AX55 (ASUS): 3.0.0.4.386_52303+8 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ASUSExpertWiFibefore 3.0.0.6.102_445443.0.0.6.102_44544Patch availableCNA
ASUSRT-AX55before 3.0.0.4.386_523033.0.0.4.386_52303Patch availableCNA
ASUSRT-AX58Ubefore 3.0.0.4.388_247623.0.0.4.388_24762Patch availableCNA
ASUSRT-AC67Ubefore 3.0.0.4.386_516853.0.0.4.386_51685Patch availableCNA
ASUSRT-AC68Rbefore 3.0.0.4.386_516853.0.0.4.386_51685Patch availableCNA
ASUSRT-AC68Ubefore 3.0.0.4.386_516853.0.0.4.386_51685Patch availableCNA
ASUSRT-AX86 Seriesbefore 3.0.0.4.388_242433.0.0.4.388_24243Patch availableCNA
ASUSRT-AC86Ubefore 3.0.0.4.386_519253.0.0.4.386_51925Patch availableCNA
ASUSRT-AX88Ubefore 3.0.0.4.388_242093.0.0.4.388_24209Patch availableCNA
ASUSRT-AX3000before 3.0.0.4.388_247623.0.0.4.388_24762Patch availableCNA
  • ExpertWiFi VendorASUS Affected before 3.0.0.6.102_44544 Fixed in 3.0.0.6.102_44544 Patch available CNA
  • RT-AX55 VendorASUS Affected before 3.0.0.4.386_52303 Fixed in 3.0.0.4.386_52303 Patch available CNA
  • RT-AX58U VendorASUS Affected before 3.0.0.4.388_24762 Fixed in 3.0.0.4.388_24762 Patch available CNA
  • RT-AC67U VendorASUS Affected before 3.0.0.4.386_51685 Fixed in 3.0.0.4.386_51685 Patch available CNA
  • RT-AC68R VendorASUS Affected before 3.0.0.4.386_51685 Fixed in 3.0.0.4.386_51685 Patch available CNA
  • RT-AC68U VendorASUS Affected before 3.0.0.4.386_51685 Fixed in 3.0.0.4.386_51685 Patch available CNA
  • RT-AX86 Series VendorASUS Affected before 3.0.0.4.388_24243 Fixed in 3.0.0.4.388_24243 Patch available CNA
  • RT-AC86U VendorASUS Affected before 3.0.0.4.386_51925 Fixed in 3.0.0.4.386_51925 Patch available CNA
  • RT-AX88U VendorASUS Affected before 3.0.0.4.388_24209 Fixed in 3.0.0.4.388_24209 Patch available CNA
  • RT-AX3000 VendorASUS Affected before 3.0.0.4.388_24762 Fixed in 3.0.0.4.388_24762 Patch available CNA

CPE names CISA-ADP · 15

CPEVersionsRoleVendor
cpe:2.3:h:asus:rt-ax58u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac67u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac68r:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:a:asus:expertwifi:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ax55:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac68u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ax86_series:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac86u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac88u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ax3000:0:*:*:*:*:*:*:*0—ASUS
  • cpe:2.3:h:asus:rt-ax58u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac67u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac68r:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:a:asus:expertwifi:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ax55:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac68u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ax86_series:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac86u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac88u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ax3000:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:asus:rt-ac68p:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac1900:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac1900u:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:rt-ac2900:0:*:*:*:*:*:*:*0—ASUS
cpe:2.3:h:asus:zenwifi_xt8:0:*:*:*:*:*:*:*0—ASUS
  • cpe:2.3:h:asus:rt-ac68p:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac1900:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac1900u:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:rt-ac2900:0:*:*:*:*:*:*:* Versions 0 — ·ASUS
  • cpe:2.3:h:asus:zenwifi_xt8:0:*:*:*:*:*:*:* Versions 0 — ·ASUS

Remediation

  • Fix · CNA ExpertWiFi (ASUS) Fixed in 3.0.0.6.102_44544
  • Fix · CNA RT-AX55 (ASUS) Fixed in 3.0.0.4.386_52303
  • Fix · CNA RT-AX58U (ASUS) Fixed in 3.0.0.4.388_24762
  • Fix · CNA RT-AC67U (ASUS) Fixed in 3.0.0.4.386_51685
  • Fix · CNA RT-AC68R (ASUS) Fixed in 3.0.0.4.386_51685
  • Fix · CNA RT-AC68U (ASUS) Fixed in 3.0.0.4.386_51685
  • Fix · CNA RT-AX86 Series (ASUS) Fixed in 3.0.0.4.388_24243
  • Fix · CNA RT-AC86U (ASUS) Fixed in 3.0.0.4.386_51925
  • Fix · CNA RT-AX88U (ASUS) Fixed in 3.0.0.4.388_24209
  • Fix · CNA RT-AX3000 (ASUS) Fixed in 3.0.0.4.388_24762

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-0401
  2. 2026-10-03 Alias added: GHSA-qxjr-363m-qwfv

References

—

  • TI-2021-12008 The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-36933 "UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were… KEVCVSS 4.0CRITICAL 9.3
  • TI-2023-20780 OS command injection in ASUS RT-AX55 KEVCVSS 3.1HIGH 8.8
  • TI-2018-04367 An issue was discovered in AsusWRT before 3.0.0.4.384_10007. CVSS 3.0CRITICAL 9.8
  • TI-2018-04368 An issue was discovered in AsusWRT before 3.0.0.4.384_10007. CVSS 3.0CRITICAL 9.8
  • TI-2014-07780 common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and… CVSS 2.0HIGH 10.0
See all 365 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences