CVE-2022-22054
ASUS RT-AX56U - Path Traversal
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
14 Jan 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
ASUS · RT-AX56UWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →