CVE-2022-25596

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

Score

CVSS 3.1 8.8 High

Status

Modified - twcert@cert.org.tw

Published

2022-04-07

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Rt-ac86u (Asus)
• Rt-ac86u Firmware (Asus)

References

• https://www.twcert.org.tw/tw/cp-132-5793-4f9d3-1.html