CVE-2022-38105

An information disclosure vulnerability exists in the cmprocessREQNC opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...

Update now! ASUS fixes nine security flaws

ASUS has released firmware updates for several router models fixing two critical and several other security issues. The new firmware with accumulated security updates is available for the models GT6, GT-AXE16000, GT-AX11000 PRO, GT-AXE11000, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8,...

CVE-2022-38105

creationtimestamp| type| source ---|---|--- 2023-01-11 00:41:51+00:00| seen| https://t.me/cibsecurity/56301 2023-01-13 13:43:21+00:00| seen| https://t.me/truesecator/3935 2023-06-19 19:55:30+00:00| seen| https://t.me/RussianOSINT/2677 2023-06-20 09:57:08+00:00| seen| https://t.me/kasperskyb2b/705...

CVE-2022-38105

CVE-2022-38105 affects Asus RT-AX82U (3.0.0.4.386_49674-ge182230). Talos singles out the cm_processREQ_NC information-disclosure vulnerability: a specially crafted network packet can leak sensitive data. The root cause involves the master_key handling in cm_processREQ_NC, where the code allocates...