RT-AX56U vulnerabilities
4 known vulnerabilities in RT-AX56U from ASUS. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
RT-AX56U: Out-of-bounds Write
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
- 8.8 High severity
RT-AX56U: Improper Neutralization of Special Elements used in an SQL Command
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
- 8.1 High severity
RT-AX56U: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file
- 8.1 High severity
RT-AX56U: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, wh