Description
An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None
Affected Packages2 packages
🔴Vulnerability Details
2GHSAGHSA-8h8q-pcwj-rx99: An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3↗2023-01-10 CVEListCVE-2022-38105: An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3↗2023-01-10 🕵️Threat Intelligence
2TalosVulnerability Spotlight: Asus router access, information disclosure, denial of service vulnerabilities discovered↗2023-01-10 TalosVulnerability Spotlight: Asus router access, information disclosure, denial of service vulnerabilities discovered↗2023-01-10