CVE-2022-26674

CRITICAL
9.8CVSS v3
7.5CVSS v2
4.55% EPSS (exploit probability)
CWE-134CWE

Description

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected routers (1)

VendorModelMatched viaAffected versionsFixed inPatch?
ASUS ASUS RT-AX88U No

External references