CVE-2022-23973CWE-787

ASUS RT-AX56U - Stack overflew

High · published April 7, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-04-07T18:22Z
EPSS history
Timeline
  • 07 APR 18:22Z
    ASUS RT-AX56U - Stack overflew
    cvelistv5