CVE-2022-23972

ASUS RT-AX56U - SQL Injection

CVSS 8.8 HIGHEPSS 0.5%CWE-89

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

ASUS · RT-AX56U

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.twcert.org.tw/tw/cp-132-5786-d2e86-1.html