CVE-2022-23971 — ASUS RT-AX56U - Path Traversal
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacke…
Published: 2022-04-07 · CVSS: 8.1 · CVSS 3.1
ASUS RT-AX56U’s update_PLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service disruption.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7