PT-2022-16377 · Asus · Asus Rt-Ax56U

Hanpeng · Published 2022-04-07 · Updated 2022-04-14 · CVE-2022-23973

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS RT-AX56U (affected versions not specified)

Description The user profile configuration function of the ASUS RT-AX56U is vulnerable to a stack-based buffer overflow due to insufficient validation for parameter length. This allows an unauthenticated LAN attacker to execute arbitrary code, enabling them to perform arbitrary operations or disrupt service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-23973

Affected Products

Asus Rt-Ax56U

References · 5

• https://osv.dev/vulnerability/CVE-2022-23973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23973 · Security Note
• https://twcert.org.tw/tw/cp-132-5787-b0e64-1.html · Note
• https://t.me/cibsecurity/40317 · Telegram Post
• https://t.me/cvenotify/28956 · Telegram Post