Lucene search
PRIOn knowledge basePRION:CVE-2022-23970HistoryApr 07, 2022 - 7:15 p.m.
Path traversal
2022-04-0719:15:00
PRIOn knowledge base
www.prio-n.com
2
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rt-ax56u_firmware | eq | 3.0.0.4.386.45898 |
Related
cve
cve
CVE-2022-23970
2022-04-07 19:15:08
nvd
nvd
CVE-2022-23970
2022-04-07 19:15:08
cvelist
cvelist
CVE-2022-23970 ASUS RT-AX56U - Path Traversal
2022-03-02 00:00:00