high8.8
CVE-2022-25596
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which…
Impact
ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Rt-Ac86u Firmware | Version 3.0.0.4.386.45956 |