CVE-2021-3128

mediumPriorität · verfolgen · 31EPSS 0.022 · 82. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.18% (82nd) EPSS

CVSS 5 · medium

Is it mine?

55 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · bewertet 2026-10-26

In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-834USprimär

betroffene Produkte (55)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
asus rt-ac1750 b1 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac1750_b1_firmware:*:*:*:*:*:*:*:*
asus rt-ac1750 b1 firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac1750_b1_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac1900_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900 firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac1900_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900p firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac1900p_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900p firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac1900p_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900u firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac1900u_firmware:*:*:*:*:*:*:*:*
asus rt-ac1900u firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac1900u_firmware:*:*:*:*:*:*:*:*
asus rt-ac2900 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac2900_firmware:*:*:*:*:*:*:*:*
asus rt-ac2900 firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac2900_firmware:*:*:*:*:*:*:*:*
asus rt-ac3100 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac3100_firmware:*:*:*:*:*:*:*:*
asus rt-ac3100 firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac3100_firmware:*:*:*:*:*:*:*:*
asus rt-ac5300 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac5300_firmware:*:*:*:*:*:*:*:*
asus rt-ac5300 firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac5300_firmware:*:*:*:*:*:*:*:*
asus rt-ac58u firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac58u_firmware:*:*:*:*:*:*:*:*
asus rt-ac58u firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac58u_firmware:*:*:*:*:*:*:*:*
asus rt-ac65u firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac65u_firmware:*:*:*:*:*:*:*:*
asus rt-ac65u firmware< 9.0.0.4.386.41994nvdUScpe:2.3:o:asus:rt-ac65u_firmware:*:*:*:*:*:*:*:*
asus rt-ac66u b1 firmware< 3.0.0.4.386.42095nvdUScpe:2.3:o:asus:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*

20 von 55 angezeigt

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

veröffentlicht 2021-04-12geändert 2026-06-17

verwandt (140)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2017-12587US	high8.8	2.03% (81st)	—	2017-08-06
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
CVE-2021-35515US	high7.5	11.6% (96th)	—	2021-07-13
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of…
CVE-2023-30226US	medium5.5	0.35% (28th)	Exploit	2023-07-12
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.
CVE-2021-39924US	high7.5	5.29% (93rd)	—	2021-11-19
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2023-38200US	high7.5	1.45% (73rd)	—	2023-07-24
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker…

+135 weitere

Referenzen (83)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan