CVE-2022-22054

published 2022-01-14

CVE-2022-22054: ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows…

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ax56u	—	—
asus	rt-ax56u_firmware	—	—

CWE-22