Rt-ax56u Firmware vulnerabilities
5 known vulnerabilities in Rt-ax56u Firmware from ASUS. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Asuswrt-Merlin New Gen: Out-of-bounds Write
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reques
- 8.8 High severity
RT-AX56U: Out-of-bounds Write
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
- 8.8 High severity
RT-AX56U: Improper Neutralization of Special Elements used in an SQL Command
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
- 8.1 High severity
RT-AX56U: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file
- 8.1 High severity
RT-AX56U: Improper Limitation of a Pathname to a Restricted Directory
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, wh