CVE-2022-22054: ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-22054.
What is the title of the vulnerability?
The title of the vulnerability is ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters.
What is the severity of CVE-2022-22054?
The severity of CVE-2022-22054 is medium.
How can an attacker exploit CVE-2022-22054?
An unauthenticated local area network attacker can exploit CVE-2022-22054 by accessing restricted system paths and downloading arbitrary files.
What is the affected software for CVE-2022-22054?
The affected software for CVE-2022-22054 is ASUS RT-AX56U with firmware version 3.0.0.4.386.44266.