CVE-2022-23973
published 2022-04-07CVE-2022-23973: ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An…
high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| asus | rt-ax56u | — | — |
| asus | rt-ax56u_firmware | — | — |