CVE-2024-28326 is an access control vulnerability affecting ASUS RT-N12+ B1 and RT-N12 D1 routers. It allows an attacker with local physical access to the UART interface to obtain root terminal access on the device. The vulnerability is classified under CWE-1263 (Incorrect Access Control). The CVSS 3.1 base score is 6.8, reflecting a medium severity with high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no patches or vendor advisories have been published at this time.

Successful exploitation grants an attacker root terminal access on the affected router models, potentially allowing full control over the device, including modification of configurations, interception or disruption of network traffic, and persistence. The attack requires physical or local access to the UART interface, limiting remote exploitation possibilities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to the device and its UART interface to trusted personnel only. Monitor vendor communications for updates regarding patches or mitigations.