CVE-2022-25596

Publication date

2022-04-07 18:22:35

Family

twcert

State

PUBLISHED

Description

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.