CVE-2022-23973: ASUS RT-AX56U - Stack overflew

Published Apr 7, 2022

Updated

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.

Affected Software

2 affected components

ASUS Rt-ax56u Firmware=3.0.0.4.386.45898

ASUS RT-AX56U

Remediation

Information

Update ASUS RT-AX56U firmware version to 3.0.0.4.386.45934

Event History

Apr 7, 2022

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-23973.

What is the severity of CVE-2022-23973?

The severity of CVE-2022-23973 is high with a severity value of 8.8.

How does CVE-2022-23973 affect ASUS RT-AX56U?

CVE-2022-23973 affects the user profile configuration function of ASUS RT-AX56U firmware version 3.0.0.4.386.45898.

What is the impact of CVE-2022-23973?

The vulnerability allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations, or disrupt service.

Is ASUS RT-AX56U vulnerable to CVE-2022-23973?

Yes, ASUS RT-AX56U firmware version 3.0.0.4.386.45898 is vulnerable to CVE-2022-23973.

How can the vulnerability CVE-2022-23973 be fixed?

To fix CVE-2022-23973, it is recommended to update ASUS RT-AX56U firmware to a version that includes the necessary security patches.