CVE-2022-25596CWE-787

ASUS RT-AC86U - Heap-based buffer overflow

High · published April 7, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-04-07T18:22Z
EPSS history
Timeline
  • 07 APR 18:22Z
    ASUS RT-AC86U - Heap-based buffer overflow
    cvelistv5