CVE-2022-38105

published 2023-01-10

CVE-2022-38105: An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ax82u	—	—
asus	rt-ax82u_firmware	—	—

CWE-119