{"id":"CVE-2026-84730","kind":"vulnerability","aliases":["CVE-2026-84730"],"related":[],"title":"ASUS router firmware: crafted device name lets nearby attacker run root commands","description":"Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name.\nRefer to the '\nSecurity Update for ASUS Router AiCloud Feature ' section on the ASUS Security Advisory for more information.","summary":"Certain ASUS router firmware has a stack-based buffer overflow triggered by a crafted device name. An unauthenticated attacker on a nearby network can execute arbitrary commands with root privileges on the router.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ASUS Router firmware","fixed":[],"affected":"3.0.0.4_386 series, 3.0.0.4_388 series, 3.0.0.6_102 series","ecosystem":"vendor"}],"ecosystems":[],"tags":["aicloud","asus","firmware","home-network","infrastructure","routers"],"not_affected_if":["aicloud-disabled","unaffected-firmware"],"how_to_check":"- In the router admin page (Administration > Firmware Upgrade) read the firmware version; if it begins 3.0.0.4_386, 3.0.0.4_388 or 3.0.0.6_102, you are in the affected series.\n- Open the 'Security Update for ASUS Router AiCloud Feature' bulletin at https://www.asus.com/security-advisory for your model and fixed firmware.\n- Also check whether AiCloud is enabled (the bulletin ties the issue to it); ASUS's listing does not say that disabling it avoids the bug.","fix":null,"status":"open","published_at":"2026-11-04T02:17:21+00:00","first_seen_at":"2026-11-04T02:46:02+00:00","triaged_at":"2026-11-04T02:47:12+00:00","updated_at":"2026-11-04T02:48:43+00:00","category":"infrastructure","confidence":0.55,"triage":{"at":"2026-11-04T02:47:12Z","model":"claude-haiku-5-5","output":{"fix":"- Update to the fixed firmware version named in the ASUS Security Advisory for the AiCloud feature (version not stated in the sources provided).","reach":"network","title":"ASUS router firmware: crafted device name lets nearby attacker run root commands","impact":"high","summary":"Certain ASUS router firmware has a stack-based buffer overflow triggered by a crafted device name. An unauthenticated attacker on a nearby network can execute arbitrary commands with root privileges on the router.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["asus","routers","firmware","aicloud","home-network"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"Attacker runs arbitrary commands as root on the router.","analyst_note":"Find the affected model list, fixed firmware versions and AiCloud conditions in the ASUS Security Advisory referenced by the NVD entry.","how_to_check":"- Check the router's firmware version in its admin page or with the vendor app and compare it to the affected ranges in the ASUS advisory.\n- Check whether the AiCloud feature is enabled, since the advisory points to it.","plain_action":"Update the firmware on your ASUS router to the version in ASUS's security advisory for AiCloud.","needs_analyst":true,"not_affected_if":["unaffected-firmware","aicloud-disabled"],"who_is_affected":"Owners of the listed ASUS router models running affected firmware are exposed, and the advisory ties the issue to the AiCloud feature. The attacker must be on a nearby network, not on the internet. Routers without the affected firmware or with the feature off may be less exposed, but the sources do not confirm this.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000729,"input_tokens":4136,"output_tokens":631,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected model list, fixed firmware versions and AiCloud conditions in the ASUS Security Advisory referenced by the NVD entry.","search":"'-2026':14A,17A '-84730':15A,18A 'advisori':106C 'aicloud':22B,99C 'allow':74C 'arbitrari':56B,81C 'asus':1A,19A,23B,31B,71C,97C,104C 'attack':9A,49B,78C 'base':38B,66C 'buffer':39B,67C 'certain':30B,70C 'command':12A,57B,82C 'craft':4A,44B,88C 'cve':13A,16A 'devic':5A,45B,89C 'execut':55B,80C 'featur':100C 'firmwar':3A,24B,33B,73C 'firmware':21A 'home':26B 'home-network':25B 'inform':109C 'infrastructur':28B 'let':7A 'name':6A,46B,90C 'nearbi':8A,52B,77C 'network':27B,53B 'overflow':40B,68C 'privileg':60B,85C 'refer':91C 'root':11A,59B,84C 'router':2A,20A,29B,32B,63B,72C,98C 'run':10A 'section':101C 'secur':94C,105C 'stack':37B,65C 'stack-bas':36B,64C 'trigger':41B 'unauthent':48B,76C 'updat':95C 'via':86C","nicknames":[],"mitigations":[],"who_affected":"ASUS routers running the 3.0.0.4_386, 3.0.0.4_388 or 3.0.0.6_102 firmware series are listed by ASUS in its AiCloud Feature bulletin. The attacker must be on a nearby (adjacent) network, not the internet, and needs no login. ASUS's listing does not state which models are included or whether turning AiCloud off avoids the bug, so check the bulletin for your model.","tier":"B","verified":{"products":{"at":"2026-11-04T02:48:43Z","by":"analyst","doc":"https://www.asus.com/security-advisory","run_id":1620}},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":["asusrouterfirmware","routerfirmware"],"ptokens":["asus","firmware","router"],"labels":["aicloud","asus","firmware","high","homenetwork","infrastructure","routers"],"campaign_type":null,"first_public_at":"2026-11-04T02:17:21+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84730","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84730","severity":null,"published_at":"2026-11-04T02:17:21+00:00","modified_at":"2026-11-04T02:17:21+00:00","first_seen_at":"2026-11-04T02:46:02+00:00","fetched_at":"2026-11-04T02:46:02+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-84730:1620","url":null,"severity":null,"published_at":"2026-11-04T02:48:43+00:00","modified_at":"2026-11-04T02:48:43+00:00","first_seen_at":"2026-11-04T02:48:43+00:00","fetched_at":"2026-11-04T02:48:43+00:00","note":"ASUS advisory listing (JS table, read via browser) gives affected firmware series 3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102 for the AiCloud bulletin. Bulletin detail page with fixed versions, model list and AiCloud condition was not reachable; fixed version unknown. No exploitation or PoC found. Check the bulletin on asus.com/security-advisory for models/fixed firmware."}],"documents":[{"id":2079,"url":"https://www.asus.com/security-advisory","title":"ASUS Product Security Advisory (listing: AiCloud Feature bulletin)","kind":"advisory","source":"analyst","publisher":null,"text":"ASUS Product Security Advisory, Latest Security Updates table (read 2026-11-04):\nSecurity Update for ASUS Router AiCloud Feature | Security Bulletin | Affected: 3.0.0.4_386 series, 3.0.0.4_388 series, 3.0.0.6_102 series | CVE-2026-84730 | Published 11/04/2026 | Last updated 11/03/2026\nThe listing does not show fixed firmware versions or the model list; the bulletin detail was not reachable (page is JavaScript-rendered).\n","published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}