Skip to content
OpenAdvisories
High · 8.8 CVE-2022-25596 EUVD-2022-30257GHSA-39fr-rq99-f592

ASUS RT-AC86U - Heap-based buffer overflow

Published Apr 7, 2022 · Updated Sep 17, 2024 · Assigned by twcert

Description

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

Affected products

VendorProductAffectedFixed
ASUS RT-AC86U 3.0.0.4.386.45956 —

References