What’s Vulnerable › Vulnerabilities

CVE-2024-11985

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-04 · updated 2026-06-17
• Weakness: CWE-20

Description

An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.

Affected products

• ASUS RT-AX55: before 3.0.0.4.386_52332
• ASUS RT-AX55 V2: before 3.0.0.4.386_52332
• ASUS RT-AX56U: before 3.0.0.4.386_51712
• ASUS RT-AX56U_V2: before 3.0.0.4.386_52332
• ASUS RT-AX57: before 3.0.0.4.386_52332
• ASUS RT-AX58U: before 3.0.0.4_388_25127
• ASUS RT-AX58U V2: before 3.0.0.4_388_25127

References

• https://www.asus.com/content/asus-product-security-advisory/

Get alerted when CVE-2024-11985 or the next vulnerability affects your stack