PT-2022-3566 · Asus · Asus Rt-Ax88U

Howard Mcgreehan · Published 2022-04-22 · Updated 2022-05-04 · CVE-2022-26674

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASUS RT-AX88U (affected versions not specified)

Description The issue is related to a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory addresses and perform remote arbitrary code execution, arbitrary system operations, or disrupt service. This vulnerability is associated with the use of uncontrolled format strings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

BDU:2022-04350

CVE-2022-26674

Affected Products

Asus Rt-Ax88U

References · 5

• https://osv.dev/vulnerability/CVE-2022-26674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26674 · Security Note
• https://bdu.fstec.ru/vul/2022-04350 · Security Note
• https://t.me/cibsecurity/41301 · Telegram Post
• https://twcert.org.tw/tw/cp-132-6043-0f72c-1.html · Note