CVE-2022-23972
published 2022-04-07CVE-2022-23972: ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject…
high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| asus | rt-ax56u | — | — |
| asus | rt-ax56u_firmware | — | — |