Rt-ax82u Firmware vulnerabilities

4 known vulnerabilities in Rt-ax82u Firmware from ASUS. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  RT-AX82U: Out-of-bounds Read

  CVE-2022-38393Jan 10, 2023ASUSEPSS 18.8%

  A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a mal

• 7.5 High severity

  RT-AX82U: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-38105Jan 10, 2023ASUSEPSS 1.12%

  An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can sen

• 8.1 High severity

  RT-AX82U: Improper Authentication

  CVE-2022-35401Jan 10, 2023ASUSEPSS 20.8%

  An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to full administrative access to the device. An attacker would need to send a series o

• 9.8 Critical severity

  Asuswrt-Merlin New Gen: Out-of-bounds Write

  CVE-2022-26376Aug 5, 2022Asuswrt-MerlinEPSS 1.49%

  A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network reques