Asus Et12 Firmware vulnerabilities

1 known vulnerability affecting asus/et12_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-26376CRITICALCVSS 9.8fixed in 3.0.0.4.386_488232022-08-05

CVE-2022-26376 [CRITICAL] CWE-787 CVE-2022-26376: A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0 A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.