Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-25597

ASUS RT-AC86U - Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS RT-AC86U

  • 3.0.0.4.386.45956affected

References