go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

ASUS RT-AX88U - Format String

TVN ID TVN-202203007
CVE ID CVE-2022-26674
CVSS 9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products ASUS RT-AX88U firmware pre v3.0.0.4.386.4606
Description ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.
Solution Update RT-AX88U firmware version to 3.0.0.4.386.46065
Credit Howard McGreehan
Public Date 2022-04-26
Top