649 matches found
CVE-2022-23972 ASUS RT-AX56U - SQL Injection
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...
CVE-2022-23971 ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...
CVE-2022-23970 ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
PT-2022-16376
Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U affected versions not specified Description The issue is related to an SQL injection vulnerability in the SQL handling function due to insufficient user input validation. This allows an unauthenticated LAN attacker to inject...
ASUS RT-AX56U SQL注入漏洞
The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A security vulnerability exists in the ASUS RT-AX56U, which can be exploited by an attacker to inject arbitrary SQL code to read, modify, and delete databases...
PT-2022-4546 · Asus · Asus Rt-Ac86U
Name of the Vulnerable Software and Affected Versions: ASUS RT-AC86U affected versions not specified Description: The issue arises from insufficient filtering for special characters in user requests to the LPD service, allowing an unauthenticated LAN attacker to perform a command injection attack...
CVE-2022-25595: Improper Input Validation
ASUS RT-AC86U has improper user request handling, which allows an unauthenticated LAN attacker to cause a denial of service by sending particular request a server-to-client reply attempt...
PT-2022-16374
Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U affected versions not specified Description The issue is related to a path traversal vulnerability in the update json function due to insufficient filtering for special characters in the URL parameter. This allows an...
CVE-2022-23971: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...
PT-2022-16375
Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U affected versions not specified Description The issue is related to a path traversal vulnerability in the update PLC/PORT file due to insufficient filtering for special characters in the URL parameter. This allows an...
CVE-2022-25596: Out-of-bounds Write
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service...
ASUS RT-AX56U 路径遍历漏洞
The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...
CVE-2022-23970: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
PT-2022-16377
Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U affected versions not specified Description The user profile configuration function of the ASUS RT-AX56U is vulnerable to a stack-based buffer overflow due to insufficient validation for parameter length. This allows an...
CVE-2022-23973: Out-of-bounds Write
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...
PT-2022-3890
Name of the Vulnerable Software and Affected Versions ASUS RT-AC56U affected versions not specified Description The configuration function of the ASUS RT-AC56U has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length. This allows an...
CVE-2022-23972: Improper Neutralization of Special Elements used in an SQL Command
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...
PT-2022-17390
Name of the Vulnerable Software and Affected Versions ASUS RT-AC86U affected versions not specified Description The issue is related to improper user request handling, allowing an unauthenticated LAN attacker to cause a denial of service by sending a particular request that triggers a...
CVE-2022-25597: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service...
