Approved changes feed: RSS · Atom

cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRt Ax56U (d79a7c68-b922-5eb3-b356-08ef0897f33e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26376 not_vulnerable 2026-06-08 05:41:51.855615 Details available
MEDIUM (5.3)
A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.
Published: 2022-08-05T21:18:47.095Z
Updated: 2025-04-15T18:53:55.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23973 not_vulnerable 2026-06-08 05:40:59.442353 ASUS RT-AX56U - Stack overflew
HIGH (8.8)
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
Published: 2022-04-07T18:22:29.853Z
Updated: 2024-09-17T01:35:51.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23972 not_vulnerable 2026-06-08 05:40:59.441959 ASUS RT-AX56U - SQL Injection
HIGH (8.8)
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
Published: 2022-04-07T18:22:27.892Z
Updated: 2024-09-16T19:30:39.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23971 not_vulnerable 2026-06-08 05:40:59.441461 ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:26.279Z
Updated: 2024-09-17T04:04:05.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23970 not_vulnerable 2026-06-08 05:40:59.440961 ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:24.706Z
Updated: 2024-09-17T01:55:53.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22054 not_vulnerable 2026-06-08 05:40:04.007010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44158 not_vulnerable 2026-06-08 05:36:45.037348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43702 not_vulnerable 2026-06-08 05:36:43.771996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41436 not_vulnerable 2026-06-08 05:35:20.551038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41435 not_vulnerable 2026-06-08 05:35:20.531761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40556 not_vulnerable 2026-06-08 05:35:18.808198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3128 not_vulnerable 2026-06-08 05:33:50.826702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20335 not_vulnerable 2026-06-08 05:11:26.989512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20334 not_vulnerable 2026-06-08 05:11:26.986840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20333 not_vulnerable 2026-06-08 05:11:26.974734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.