by Kastro
Paper/Archive/CVE-2022-26674

CVE-2022-26674

ASUS RT-AX88U — ASUS RT-AX88U - Format String

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.3.863 × 2017.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.

Affected

ProductAffectedFixed inSource
RT-AX88Uunspecified – < 3.0.0.4.386.46063.0.0.4.386.4606CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-6043-0f72c-1.html