Skip to content
OpenAdvisories
High · 7.5 CVE-2022-38105 EUVD-2022-40707GHSA-8h8q-pcwj-rx99

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configur…

Published Jan 10, 2023 · Updated Aug 3, 2024 · Assigned by talos

Description

An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Asus RT-AX82U 3.0.0.4.386_49674-ge182230 —

References