CVE-2022-23972CWE-89

ASUS RT-AX56U - SQL Injection

High · published April 7, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-04-07T18:22Z
EPSS history
Timeline
  • 07 APR 18:22Z
    ASUS RT-AX56U - SQL Injection
    cvelistv5