CVE-2022-23973 ASUS RT-AX56U - Stack overflew

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service...

CVE-2022-23973

CVE-2022-23973 affects the ASUS RT-AX56U router. The vulnerability is a stack-based buffer overflow in the user profile configuration function caused by insufficient validation of parameter length. An unauthenticated attacker on the local network (LAN) can trigger arbitrary code execution or disr...

CVE-2022-23972

CVE-2022-23972 concerns the ASUS RT-AX56U router. The vulnerability is described as an SQL injection in the router’s SQL handling function caused by insufficient input validation. An unauthenticated attacker on the local network (LAN) can inject arbitrary SQL code to read, modify, and delete data...

CVE-2022-23972 ASUS RT-AX56U - SQL Injection

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database...

CVE-2022-23971

CVE-2022-23971 concerns ASUS RT-AX56U, where the update_PLC/PORT file path traversal arises from insufficient filtering of special URL characters. An unauthenticated attacker on the LAN can overwrite a system file by uploading another PLC/PORT file with the same name, leading to service disruptio...

CVE-2022-23971 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...

CVE-2022-23970

The CVE-2022-23970 entry concerns the ASUS RT-AX56U router. A path traversal flaw exists in the update_json function due to insufficient filtering of special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same filena...

CVE-2022-23970 ASUS RT-AX56U - Path Traversal

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

PT-2022-4546 · Asus · Asus Rt-Ac86U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC86U affected versions not specified Description: The issue arises from insufficient filtering for special characters in user requests to the LPD service, allowing an unauthenticated LAN attacker to perform a command injection attack...

ASUS RT-AX56U 路径遍历漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

ASUS RT-AC56U 缓冲区错误漏洞

The ASUS RT-AC56U is a dual-band Wi-Fi router from ASUS China. A security vulnerability exists in the ASUS RT-AC56U, which originates from an insufficient validation of the decryption parameter length, and allows an attacker to execute arbitrary code, arbitrary operations, and interrupt services...

ASUS RT-AX56U SQL注入漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A security vulnerability exists in the ASUS RT-AX56U, which can be exploited by an attacker to inject arbitrary SQL code to read, modify, and delete databases...

RHEL 8 : kernel-rt (RHSA-2022:1209)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1209 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

RHEL 7 : kernel-rt (RHSA-2022:1199)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1199 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Critical Photon OS Security Update - PHSA-2022-0168

Updates of 'linux-aws', 'linux', 'lua', 'curl', 'linux-secure', 'bindutils', 'vim', 'linux-rt', 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2022-3.0-0376

Updates of 'libtiff', 'zsh', 'linux-aws', 'vim', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

CVE-2021-45756

Asus RT-AC68U 3.0.0.4.385.20633 and RT-AC5300 3.0.0.4.384.82072 are affected by a buffer overflow in blockingrequest.cgi...

CVE-2021-45756

Summary: The CVE-2021-45756 issue affects ASUS RT-AC68U (versions prior to 3.0.0.4.385.20633) and RT-AC5300 (prior to 3.0.0.4.384.82072). A buffer overflow in blocking_request.cgi (an in-memory operation) can lead to arbitrary command execution. The vulnerability is confirmed by multiple sources ...