CVE-2024-0401: ASUS OVPN RCE

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-20 · updated 2026-06-17
Weakness: CWE-78

Description

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

Affected products

ASUS ExpertWiFi: before 3.0.0.6.102_44544 — fixed in 3.0.0.6.102_44544
ASUS Rt-Ac1900: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS Rt-Ac1900U: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS Rt-Ac2900: before 3.0.0.4.386_51925 — fixed in 3.0.0.4.386_51925
ASUS RT-AC67U: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS Rt-Ac68P: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS RT-AC68R: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS RT-AC68U: before 3.0.0.4.386_51685 — fixed in 3.0.0.4.386_51685
ASUS Rt-Ac86U: before 3.0.0.4.386_51925 — fixed in 3.0.0.4.386_51925
ASUS Rt-Ac88U: before 3.0.0.4.388_24209 — fixed in 3.0.0.4.388_24209
ASUS RT-AX3000: before 3.0.0.4.388_24762 — fixed in 3.0.0.4.388_24762
ASUS Rt-Ax55: before 3.0.0.4.386_52303 — fixed in 3.0.0.4.386_52303
ASUS RT-AX58U: before 3.0.0.4.388_24762 — fixed in 3.0.0.4.388_24762
ASUS RT-AX86 Series: before 3.0.0.4.388_24243 — fixed in 3.0.0.4.388_24243
ASUS ZenWiFi XT8: before 3.0.0.4.388_24621 — fixed in 3.0.0.4.388_24621

How to fix

Upgrade to a fixed version: ASUS ExpertWiFi 3.0.0.6.102_44544; ASUS Rt-Ac1900 3.0.0.4.386_51685; ASUS Rt-Ac1900U 3.0.0.4.386_51685; ASUS Rt-Ac2900 3.0.0.4.386_51925; ASUS RT-AC67U 3.0.0.4.386_51685; ASUS Rt-Ac68P 3.0.0.4.386_51685; ASUS RT-AC68R 3.0.0.4.386_51685; ASUS RT-AC68U 3.0.0.4.386_51685; ASUS Rt-Ac86U 3.0.0.4.386_51925; ASUS Rt-Ac88U 3.0.0.4.388_24209; ASUS RT-AX3000 3.0.0.4.388_24762; ASUS Rt-Ax55 3.0.0.4.386_52303. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-0401 or the next vulnerability affects your stack