CVE-2022-25597

8.8 highEPSS 0.8%

High (8.8) in asus rt-ac86u firmware. EPSS 0.8% chance of exploitation in the next 30 days.

ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-04-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

asus:rt-ac86u_firmware

References

https://www.twcert.org.tw/tw/cp-132-5794-09c33-1.html
https://www.twcert.org.tw/tw/cp-132-5794-09c33-1.html

Check your stack JSON