CVE-2022-22054

CWE-22 — Path Traversal3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 71.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Asus Rt-ax56uAsus Rt-ax56u Firmware
Timeline
PublishedJan 14
Latest updateJan 15

Description

ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5asus/rt-ax56u3.0.0.4.386.44266
▶NVDasus/rt-ax56u_firmware3.0.0.4.386.44266

🔴Vulnerability Details

2
GHSA
GHSA-564g-xwvc-g44q: ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which↗2022-01-15
▶
CVEList
ASUS RT-AX56U - Path Traversal↗2022-01-14
▶