CVE-2024-3080Active Exploitation

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-10: 1Active Exploitation · 2026-03-10: 103-10
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows KadNap malware exploiting CVE-2024-3080 and CVE-2024-3912 to hijack over 14,000 Asus routers into a stealth botnet. Attackers use modified Kademlia DHT protocol to hide C2 infrastructure within peer-to-peer networks, evading traditional detection. #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/kadnap-malware-2026-asus-routers-botnet

    Post summary

    The text reports that attackers are actively exploiting CVE-2024-3080 and CVE-2024-3912 to compromise more than 14,000 Asus routers, forming a stealth botnet and hiding command & control nodes in a modified Kademlia DHT network.

    0000078
    1.9K followersView on X

Explore more