ASUS RT-AX56U FIRMWARE 3.0.0.4.386.45898
Approved changes feed: RSS · Atom
cpe:2.3:o:asus:rt-ax56u_firmware:3.0.0.4.386.45898:*:*:*:*:*:*:*
part: o version: 3.0.0.4.386.45898 update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Rt Ax56U Firmware (1a815531-1d8c-57df-816e-70baf712a6a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23973 |
vulnerable | 2026-06-08 05:40:59.442331 |
ASUS RT-AX56U - Stack overflew
HIGH (8.8)
ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.
Published: 2022-04-07T18:22:29.853Z
Updated: 2024-09-17T01:35:51.997Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23972 |
vulnerable | 2026-06-08 05:40:59.441831 |
ASUS RT-AX56U - SQL Injection
HIGH (8.8)
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.
Published: 2022-04-07T18:22:27.892Z
Updated: 2024-09-16T19:30:39.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23971 |
vulnerable | 2026-06-08 05:40:59.441436 |
ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:26.279Z
Updated: 2024-09-17T04:04:05.439Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23970 |
vulnerable | 2026-06-08 05:40:59.440239 |
ASUS RT-AX56U - Path Traversal
HIGH (8.1)
ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.
Published: 2022-04-07T18:22:24.706Z
Updated: 2024-09-17T01:55:53.709Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.