CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-35720

CVE-2023-35720 affects ASUS RT-AX92U via the mod_webdav.so module. The flaw allows network-adjacent attackers to disclose sensitive information through SQL injection in requests, with no authentication required and root context obtainable. The vulnerability stems from inadequate validation of a u...