CVE-2024-0401

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: May 20, 2024
Source updated: Nov 22, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

ASUS OVPN RCE

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U, ASUS RT-AC67U, ASUS RT-AC68R, ASUS RT-AC68U, ASUS RT-AX86, ASUS RT-AC86U, ASUS RT-AX88U, and ASUS RT-AX3000.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ExpertWiFi

Vendor: ASUS
Product: ExpertWiFi
Platforms: Unknown
Default status: unaffected

ExpertWiFi · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.6.102_44544	Unavailable	None listed

RT-AX55

Vendor: ASUS
Product: RT-AX55
Platforms: Unknown
Default status: unaffected

RT-AX55 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.386_52303	Unavailable	None listed

RT-AX58U

Vendor: ASUS
Product: RT-AX58U
Platforms: Unknown
Default status: unaffected

RT-AX58U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.388_24762	Unavailable	None listed

RT-AC67U

Vendor: ASUS
Product: RT-AC67U
Platforms: Unknown
Default status: unaffected

RT-AC67U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.386_51685	Unavailable	None listed

RT-AC68R

Vendor: ASUS
Product: RT-AC68R
Platforms: Unknown
Default status: unaffected

RT-AC68R · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.386_51685	Unavailable	None listed

RT-AC68U

Vendor: ASUS
Product: RT-AC68U
Platforms: Unknown
Default status: unaffected

RT-AC68U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.386_51685	Unavailable	None listed

RT-AX86 Series

Vendor: ASUS
Product: RT-AX86 Series
Platforms: Unknown
Default status: unaffected

RT-AX86 Series · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.388_24243	Unavailable	None listed

RT-AC86U

Vendor: ASUS
Product: RT-AC86U
Platforms: Unknown
Default status: unaffected

RT-AC86U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.386_51925	Unavailable	None listed

RT-AX88U

Vendor: ASUS
Product: RT-AX88U
Platforms: Unknown
Default status: unaffected

RT-AX88U · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.388_24209	Unavailable	None listed

RT-AX3000

Vendor: ASUS
Product: RT-AX3000
Platforms: Unknown
Default status: unaffected

RT-AX3000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.0.0.4.388_24762	Unavailable	None listed