High-severity vulnerabilities affect a wide range of Asus router models
Briefly

The most critical vulnerability, tracked as CVE-2024-3080, is an authentication bypass flaw allowing remote access without authentication, rated 9.8. Another vulnerability, CVE-2024-3079, enables arbitrary commands execution for attackers with admin access.
A third vulnerability, CVE-2024-3912, allows remote command execution with no authentication. Asus advises updating firmware, creating strong unique passwords, and disabling vulnerable services like remote access and port forwarding.
Read at Ars Technica
[
|
]