CVE-2021-3128

HIGH

ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U < 3.0.0.4.386.42095 - IPv6 Routing Loop DoS

Title source: llm
STIX 2.1

Description

In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

References (27)

Core 27
Core References
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC5300/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC88U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC3100/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC86U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC2900/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC1750_B1/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC1900/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC1900P/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC1900U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC68P/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC68R/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC68RW/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC68U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC58U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC85U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC65U/HelpDesk_download/
Product, Vendor Advisory x_refsource_misc
https://www.asus.com/supportonly/RT-AC68W/HelpDesk_download/

Scores

CVSS v3 7.5
EPSS 0.0218
EPSS Percentile 80.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-834
Status published
Products (27)
asus/rt-ac1750_b1_firmware < 3.0.0.4.386.42095
asus/rt-ac1900_firmware < 3.0.0.4.386.42095
asus/rt-ac1900p_firmware < 3.0.0.4.386.42095
asus/rt-ac1900u_firmware < 3.0.0.4.386.42095
asus/rt-ac2900_firmware < 3.0.0.4.386.42095
asus/rt-ac3100_firmware < 3.0.0.4.386.42095
asus/rt-ac5300_firmware < 3.0.0.4.386.42095
asus/rt-ac58u_firmware < 3.0.0.4.386.42095
asus/rt-ac65u_firmware < 3.0.0.4.386.42095
asus/rt-ac66u_b1_firmware < 3.0.0.4.386.42095
... and 17 more
Published Apr 12, 2021
Tracked Since Feb 18, 2026