ASUS RT-AX56U Firmware 3.0.0.4.386.44266
Approved changes feed: RSS · Atom
cpe:2.3:o:asus:rt-ax56u_firmware:3.0.0.4.386.44266:*:*:*:*:*:*:*
part: o version: 3.0.0.4.386.44266 update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ax56U Firmware (1a815531-1d8c-57df-816e-70baf712a6a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22054 |
vulnerable | 2026-06-08 05:40:04.006282 |
ASUS RT-AX56U - Path Traversal
MEDIUM (6.5)
ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.
Published: 2022-01-14T04:50:39.957Z
Updated: 2024-09-17T01:01:37.824Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44158 |
vulnerable | 2026-06-08 05:36:45.037218 |
ASUS RT-AX56U Router - Stack-based buffer overflow
HIGH (8)
ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service.
Published: 2022-01-03T10:10:18.551Z
Updated: 2024-09-16T16:52:58.821Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40556 |
vulnerable | 2026-06-08 05:35:18.807446 |
Details available
A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacker to execute commands remotely. The vulnerability requires authentication.
Published: 2022-10-06T00:00:00.000Z
Updated: 2024-08-04T02:44:10.797Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.