CRITICAL🇵🇱 Wersja polska

CVE-2021-41435

CVSS 9.8v3.1pub. 2021-11-19upd. 2026-07-09

A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Asus Gt Ax11000

    HW
    Asus
    all versions

  • Asus Gt Ax11000 Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax3000

    HW
    Asus
    all versions

  • Asus Rt Ax3000 Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax55

    HW
    Asus
    all versions

  • Asus Rt Ax55 Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax56u

    HW
    Asus
    all versions

  • Asus Rt Ax56u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax56u V2

    HW
    Asus
    all versions

  • Asus Rt Ax56u V2 Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax58u

    HW
    Asus
    all versions

  • Asus Rt Ax58u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax68u

    HW
    Asus
    all versions

  • Asus Rt Ax68u Firmware

    OS
    Asus
    < 3.0.0.4.386.45911

  • Asus Rt Ax82u

    HW
    Asus
    all versions

  • Asus Rt Ax82u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax82u Gundam Edition

    HW
    Asus
    all versions

  • Asus Rt Ax82u Gundam Edition Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax86s

    HW
    Asus
    all versions

  • Asus Rt Ax86s Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax86u

    HW
    Asus
    all versions

  • Asus Rt Ax86u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax86u Zaku Ii Edition

    HW
    Asus
    all versions

  • Asus Rt Ax86u Zaku Ii Edition Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax88u

    HW
    Asus
    all versions

  • Asus Rt Ax88u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Rt Ax92u

    HW
    Asus
    all versions

  • Asus Rt Ax92u Firmware

    OS
    Asus
    < 3.0.0.4.386.45898

  • Asus Tuf Ax5400

    HW
    Asus
    all versions

  • Asus Tuf Ax5400 Firmware

    OS
    Asus
    < 3.0.0.4.386.45898
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-35087CRITICAL9.8PL ✓same product

Format string RCE w ASUS RT-AX56U V2 i RT-AC86U (AiMesh)

CVE-2022-26376CRITICAL9.8PL ✓same product

Uszkodzenie pamięci w module httpd routerów ASUS (Asuswrt/Asuswrt-Merlin)

CVE-2021-43702CRITICAL9.0PL ✓same product

Stored XSS w panelu administracyjnym routera ASUS RT-AC88U via SSID

CVE-2022-26674CRITICAL9.8PL ✓same product

Format String RCE w firmware ASUS RT-AX88U — nieautoryzowany dostęp zdalny

CVE-2020-36109CRITICAL9.8PL ✓same product

Buffer overflow w ASUS RT-AX86U — RCE przez funkcję blocking_request.cgi