CVE-2021-37910

moderate-risk
Published 2021-11-12

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.

Do I need to act?

~
3.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.7/10 Low
NETWORK / HIGH complexity

Affected Products (5)

Gt-Axe11000 Firmware
Rt-Ax3000 Firmware
Rt-Ax55 Firmware
Rt-Ax58U Firmware
Tuf-Ax3000 Firmware

Affected Vendors

Asus

References (2)

Third Party Advisory https://www.twcert.org.tw/tw/cp-132-5259-22a26-1.html
Third Party Advisory https://www.twcert.org.tw/tw/cp-132-5259-22a26-1.html
32
/ 100
moderate-risk
Severity 13/34 · Low
Exploitability 7/34 · Low
Exposure 12/34 · Low