ASUS Firmware Update Fixes Critical Router Vulnerabilities and Download Master Issues

Image credit: ASUS website 

BleepingComputer reports that ASUS has issued a new firmware update to fix a vulnerability in seven of its router models, which previously allowed remote attackers to gain access. However, Taiwan's CERT has also alerted the public to CVE-2024-3912, a critical vulnerability with a severity score of 9.8. This flaw permits unauthenticated, remote attackers to execute system commands via arbitrary firmware uploads. Not all affected ASUS router models will receive security updates as some have reached end-of-life status.

Additionally, ASUS has updated Download Master, a utility for managing and downloading files to USB storage devices on its routers using torrent, HTTP, or FTP. The latest version, 3.1.0.114, fixes five medium to high-severity issues related to arbitrary file upload, OS command injection, buffer overflow, reflected XSS, and stored XSS vulnerabilities.