Summary:
ASUS has released security updates to address two high severity flaws impacting several of its router models. Tracked as CVE-2024-12912 and CVE-2024-13062, the bugs could enable authenticated attackers to execute commands through the ASUS AiCloud feature, a cloud-based service that allows users to remotely access, share, and manage their data stored on ASUS routers. Specifically, the vulnerabilities impact routers running firmware versions 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102. While ASUS did not mention whether these flaws are actively being exploited in attacks in the wild, the vendor recommends updating to the latest firmware releases as soon as possible. Please defer to the ASUS support page below to find the newest firmware for your device model:
https://www.asus.com/support/

Security Officer Comments:
While these vulnerabilities require administrative access for successful exploitation, attackers can gain entry through credential stuffing or brute-forcing attacks, exploiting weak or commonly used passwords. Once authenticated, attackers could execute malicious commands, effectively compromising the router and the network. This could grant them access to sensitive data, enable them to reconfigure settings, and even integrate the router into a botnet, using it as a launching pad for further attacks on other systems or networks.

Suggested Corrections:
To mitigate the risk, ASUS recommends users take the following steps: