VULNERABILITY INTELLIGENCE

CVE-2022-25597

CVSS score8.8 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2022-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.

Weakness classification

  • twcert@cert.org.tw: CWE-78
  • nvd@nist.gov: NVD-CWE-Other

Primary references