Security Advisory

CVE-2022-23972

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-07 18:22:27
Last updated 2024-09-16 19:30:39
Assigner twcert
State PUBLISHED

Description

ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.