華碩7款路由器有驗證繞過漏洞，應立即更新韌體
支付動態 · 2024-06-18
華碩於6月14日修補存在於ZenWiFi XT8等7款路由器產品的安全漏洞CVE-2024-3080，這項漏洞允許未經身分鑑別之遠端攻擊者登入設備
背景圖片取自geralt on pixabay
華碩7款家用及消費性路由器產品傳出重大驗證繞過漏洞，可讓未經授權的攻擊者遠端登入裝置。華碩及資安專家呼籲用戶儘早安裝新版軟體。
這項驗證繞過漏洞編號CVE-2024-3080，發生在華碩家用及消費性路由器產品的韌體，影響ZenWiFi XT8、ZenWiFi XT8 V2、RT-AX88U、RT-AX58U、RT-AX57、RT-AC86U及RT-AC68U。
華碩已在上周安全公告中發布新版韌體下載連結，呼籲用戶儘速更新。華碩並呼籲用戶不要使用預設密碼，並設定混合字元，最少10位元的密碼。
該漏洞技術細節不明。但TWCERT/CC公告，CVE-2024-3080為一鑑別繞過漏洞，允許未經身分鑑別的遠端攻擊者登入設備，風險值達9.8。
華碩同時更新了CVE-2024-3079的韌體問題，它是風險值7.2的堆疊式緩衝溢位漏洞。最新漏洞可讓取得管理權限的遠端攻擊者在路由器上執行任意指令。兩漏洞都是由同一資安研究員通報。
同一波安全修補行動中，華碩還修補了影響Asus下載大師（Download Master）App中的5項中度風險漏洞CVE-2024-31159到2024-31163，該公司已主動更新該App解決安全問題。
Popular articles
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
