What is CVE-2021-37910?

CVE-2021-37910 is a low-severity vulnerability in Asus Gt-axe11000, classified under CWE-799. CVSS score: 3.7/10. Published 2021-11-12.

How severe is CVE-2021-37910?

Low severity. CVSS v3 base score is 3.7 out of 10.

Is CVE-2021-37910 known to be exploited?

9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Asus Gt-axe11000

CVE-2021-37910

ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE aut…

EPSS: 0.036 (88.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Asus Gt-axe11000 — versions unspecified
Asus Rt-ax3000 — versions unspecified
Asus Rt-ax55 — versions unspecified
Asus Rt-ax58u — versions unspecified
Asus Tuf-ax3000 — versions unspecified

Weakness classification (CWE)

CWE-799

Public proof-of-concept exploits

References

www.twcert.org.tw/tw/cp-132-5259-22a26-1.html (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-37910?: CVE-2021-37910 is a low-severity vulnerability in Asus Gt-axe11000, classified under CWE-799. CVSS score: 3.7/10. Published 2021-11-12.
How severe is CVE-2021-37910?: Low severity. CVSS v3 base score is 3.7 out of 10.
Is CVE-2021-37910 known to be exploited?: 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.