Approved changes feed: RSS · Atom

cpe:2.3:a:asus:rt-ax56u:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ax56U (d79a7c68-b922-5eb3-b356-08ef0897f33e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11985 vulnerable 2026-06-08 06:23:50.815236 Details available
MEDIUM (4.4)
An improper input validation vulnerability leads to device crashes in certain ASUS router models. Refer to the '12/03/2024 ASUS Router Improper Input Validation' section on the ASUS Security Advisory for more information.
Published: 2024-12-04T01:20:10.965Z
Updated: 2024-12-04T14:09:12.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23973 vulnerable 2026-06-08 05:40:59.442302 ASUS RT-AX56U - Stack overflew
HIGH (8.8)
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
Published: 2022-04-07T18:22:29.853Z
Updated: 2024-09-17T01:35:51.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23972 vulnerable 2026-06-08 05:40:59.441800 ASUS RT-AX56U - SQL Injection
HIGH (8.8)
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
Published: 2022-04-07T18:22:27.892Z
Updated: 2024-09-16T19:30:39.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23971 vulnerable 2026-06-08 05:40:59.441395 ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:26.279Z
Updated: 2024-09-17T04:04:05.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23970 vulnerable 2026-06-08 05:40:59.439579 ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:24.706Z
Updated: 2024-09-17T01:55:53.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22054 vulnerable 2026-06-08 05:40:04.005306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44158 vulnerable 2026-06-08 05:36:45.036295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.