Lucene search

[email protected]NVD:CVE-2022-26376

HistoryAug 05, 2022 - 10:15 p.m.

CVE-2022-26376

2022-08-0522:15:11

CWE-787

[email protected]

web.nvd.nist.gov

memory corruption

http request

network request

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

80.1%

JSON

A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7… A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Affected configurations

Nvd

Node

asusasuswrtRange<3.0.0.4.386_48706

Node

asuswrt-merlinnew_genRange<386.7

Node

asusxt8Match-

AND

asusxt8_firmwareRange<3.0.0.4.386_48706

Node

asustuf-ax3000_v2Match-

AND

asustuf-ax3000_v2_firmwareRange<3.0.0.4.386_48750

Node

asusxd4Match-

AND

asusxd4_firmwareRange<3.0.0.4.386_48790

Node

asuset12Match-

AND

asuset12_firmwareRange<3.0.0.4.386_48823

Node

asusgt-ax6000Match-

AND

asusgt-ax6000_firmwareRange<3.0.0.4.386_48823

Node

asusxt12Match-

AND

asusxt12_firmwareRange<3.0.0.4.386_48823

Node

asusrt-ax58uMatch-

AND

asusrt-ax58u_firmwareRange<3.0.0.4.386_48908

Node

asusxt9_firmwareRange<3.0.0.4.388_20027

AND

asusxt9Match-

Node

asusxd6_firmwareRange<3.0.0.4.386_49356

AND

asusxd6Match-

Node

asusgt-ax11000_pro_firmwareRange<3.0.0.4.386_48996

AND

asusgt-ax11000_proMatch-

Node

asusgt-axe16000_firmwareRange<3.0.0.4.386_48786

AND

asusgt-axe16000Match-

Node

asusrt-ax86u_firmwareRange<3.0.0.4.386_49447

AND

asusrt-ax86uMatch-

Node

asusrt-ax68u_firmwareRange<3.0.0.4.386_49479

AND

asusrt-ax68uMatch-

Node

asusrt-ax82u_firmwareRange<3.0.0.4.386_49380

AND

asusrt-ax82uMatch-

Node

asusrt-ax56u_firmwareRange<3.0.0.4.386_49559

AND

asusrt-ax56uMatch-

Node

asusrt-ax55_firmwareRange<3.0.0.4.386_49559

AND

asusrt-ax55Match-

Node

asusgt-ax11000_firmwareRange<3.0.0.4.386_49559

AND

asusgt-ax11000Match-

VendorProductVersionCPE
asusasuswrt*cpe:2.3:o:asus:asuswrt:*:*:*:*:*:*:*:*
asuswrt-merlinnew_gen*cpe:2.3:o:asuswrt-merlin:new_gen:*:*:*:*:*:*:*:*
asusxt8-cpe:2.3:h:asus:xt8:-:*:*:*:*:*:*:*
asusxt8_firmware*cpe:2.3:o:asus:xt8_firmware:*:*:*:*:*:*:*:*
asustuf-ax3000_v2-cpe:2.3:h:asus:tuf-ax3000_v2:-:*:*:*:*:*:*:*
asustuf-ax3000_v2_firmware*cpe:2.3:o:asus:tuf-ax3000_v2_firmware:*:*:*:*:*:*:*:*
asusxd4-cpe:2.3:h:asus:xd4:-:*:*:*:*:*:*:*
asusxd4_firmware*cpe:2.3:o:asus:xd4_firmware:*:*:*:*:*:*:*:*
asuset12-cpe:2.3:h:asus:et12:-:*:*:*:*:*:*:*
asuset12_firmware*cpe:2.3:o:asus:et12_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asus	asuswrt	*	cpe:2.3:o:asus:asuswrt::::::::
asuswrt-merlin	new_gen	*	cpe:2.3:o:asuswrt-merlin:new_gen::::::::
asus	xt8	-	cpe:2.3:h:asus:xt8:-:::::::*
asus	xt8_firmware	*	cpe:2.3:o:asus:xt8_firmware::::::::
asus	tuf-ax3000_v2	-	cpe:2.3:h:asus:tuf-ax3000_v2:-:::::::*
asus	tuf-ax3000_v2_firmware	*	cpe:2.3:o:asus:tuf-ax3000_v2_firmware::::::::
asus	xd4	-	cpe:2.3:h:asus:xd4:-:::::::*
asus	xd4_firmware	*	cpe:2.3:o:asus:xd4_firmware::::::::
asus	et12	-	cpe:2.3:h:asus:et12:-:::::::*
asus	et12_firmware	*	cpe:2.3:o:asus:et12_firmware::::::::