VULNERABILITY INTELLIGENCE

CVE-2022-25596

CVSS score8.8 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2022-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references