CVE-2022-23973

8.8 highEPSS 0.5%

High (8.8) in asus rt-ax56u firmware. EPSS 0.5% chance of exploitation in the next 30 days.

ASUS RT-AX56U’s user profile configuration function is vulnerable to stack-based buffer overflow due to insufficient validation for parameter length. An unauthenticated LAN attacker can execute arbitrary code to perform arbitrary operations or disrupt service.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2022-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

asus:rt-ax56u_firmware

References

https://www.twcert.org.tw/tw/cp-132-5787-b0e64-1.html
https://www.twcert.org.tw/tw/cp-132-5787-b0e64-1.html

Check your stack JSON