CVE-2021-41435
published 2021-11-19CVE-2021-41435: A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| asus | gt-ax11000_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax3000_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax55_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax56u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax56u_v2_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax58u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax68u_firmware | < 3.0.0.4.386.45911 | 3.0.0.4.386.45911 |
| asus | rt-ax82u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax82u_gundam_edition_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax86s_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax86u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax86u_zaku_ii_edition_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax88u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | rt-ax92u_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | tuf-ax5400_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | tuf_gaming_ax3000_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | zenwifi_ax_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |
| asus | zenwifi_xd6_firmware | < 3.0.0.4.386.45898 | 3.0.0.4.386.45898 |