{"id":"CVE-2026-84729","kind":"vulnerability","aliases":["CVE-2026-84729"],"related":[],"title":"ASUS router firmware: out-of-bounds write from crafted nearby packets","description":"Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a crafted packet.\nRefer to the ' \nSecurity Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.","summary":"Certain ASUS router firmware versions contain an out-of-bounds write triggered by a crafted packet. An unauthenticated attacker on a nearby network could write data beyond an intended buffer, or crash the device with a denial-of-service.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["asus","home-network","infrastructure","routers"],"not_affected_if":["no-nearby-untrusted-access","unaffected-firmware"],"how_to_check":"- Find your router model and firmware version in the ASUS admin page or the ASUS Router app\n- Open the 'Security Update for ASUS Router Firmware' section of the ASUS Security Advisory and compare. Affected models and fixed builds are not yet confirmed from a vendor page.\n- If a newer firmware is listed for your model on asus.com/support, install it.","fix":null,"status":"open","published_at":"2026-11-04T02:17:21+00:00","first_seen_at":"2026-11-04T02:46:02+00:00","triaged_at":"2026-11-04T02:47:16+00:00","updated_at":"2026-11-04T02:48:29+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-04T02:47:16Z","model":"claude-haiku-5-5","output":{"fix":"- unknown; the sources point to the ASUS Security Advisory for the firmware update","reach":"network","title":"ASUS router firmware: out-of-bounds write from crafted nearby packets","impact":"high","summary":"Certain ASUS router firmware versions contain an out-of-bounds write triggered by a crafted packet. An unauthenticated attacker on a nearby network could write data beyond an intended buffer, or crash the device with a denial-of-service.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["asus","routers","home-network"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker writes past a buffer, or crashes the router","analyst_note":"Get the affected ASUS models and fixed firmware versions from the ASUS Security Advisory referenced in the NVD description.","how_to_check":"- Identify the ASUS router model and firmware version in the admin interface or the vendor app\n- Compare against the affected versions in the ASUS Security Advisory (not stated in the sources)\n- unknown","plain_action":"Check your ASUS router for a firmware update in the ASUS router app or admin page, and install it if one is offered.","needs_analyst":true,"not_affected_if":["unaffected-firmware","no-nearby-untrusted-access"],"who_is_affected":"Owners of affected ASUS router models on firmware versions covered by the ASUS Security Advisory. The sources do not list the affected models or versions. Devices on networks where untrusted parties can send packets are the most exposed; the sources say an attacker must be nearby.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000712,"input_tokens":4149,"output_tokens":594,"severity_before":"high"},"analyst_status":"done","analyst_note":"Get the affected ASUS models and fixed firmware versions from the ASUS Security Advisory referenced in the NVD description.","search":"'-2026':14A,17A '-84729':15A,18A 'advisori':115C 'allow':76C 'asus':1A,19B,26B,73C,107C,113C 'attack':44B,80C 'beyond':52B,84C 'bound':7A,35B,69C 'buffer':55B,87C 'caus':90C 'certain':25B,72C 'contain':30B 'could':49B 'craft':10A,40B,99C 'crash':57B 'cve':13A,16A 'data':51B,83C 'denial':63B,93C 'denial-of-servic':62B,92C 'devic':59B 'dos':96C 'firmwar':3A,28B,75C,109C 'home':21B 'home-network':20B 'inform':118C 'infrastructur':23B 'intend':54B,86C 'nearbi':11A,47B,79C 'network':22B,48B 'out-of-bound':4A,32B,66C 'packet':12A,41B,100C 'potenti':89C 'refer':101C 'router':2A,24B,27B,74C,108C 'section':110C 'secur':104C,114C 'servic':65B,95C 'trigger':37B 'unauthent':43B,78C 'updat':105C 'version':29B 'via':97C 'write':8A,36B,50B,70C,82C","nicknames":[],"mitigations":[],"who_affected":"Owners of affected ASUS router models on firmware versions covered by the ASUS Security Advisory. The sources do not list the affected models or versions. Devices on networks where untrusted parties can send packets are the most exposed; the sources say an attacker must be nearby.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Check your ASUS router for a firmware update in the ASUS router app or admin page, and install it if one is offered.","pkeys":[],"ptokens":[],"labels":["asus","high","homenetwork","infrastructure","routers"],"campaign_type":null,"first_public_at":"2026-11-04T02:17:21+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84729","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84729","severity":null,"published_at":"2026-11-04T02:17:21+00:00","modified_at":"2026-11-04T02:17:21+00:00","first_seen_at":"2026-11-04T02:46:02+00:00","fetched_at":"2026-11-04T02:46:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-84729:1621","url":null,"severity":null,"published_at":"2026-11-04T02:48:29+00:00","modified_at":"2026-11-04T02:48:29+00:00","first_seen_at":"2026-11-04T02:48:29+00:00","fetched_at":"2026-11-04T02:48:29+00:00","note":"Could not read the ASUS advisory: asus.com advisory pages only redirect, and no page names this CVE with models or fixed builds. Only the NVD text is linked. Sibling ASUS bulletins from Oct 2026 concern the 3.0.0.6_102, 3.0.0.4_386 and 3.0.0.4_388 series, but nothing ties this CVE to them, so no versions are written. Nothing is marked verified. To settle it, read the 'Security Update for ASUS Router Firmware' entry on asus.com/content/security-advisory in a browser."}],"documents":[{"id":63349,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84729","title":"NVD CVE-2026-84729","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}