CVE-2022-38393

2023-01-1021:15:11

CWE-125

[email protected]

web.nvd.nist.gov

asus rt-ax82u

denial of service

configuration service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

36.6%

JSON

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router’s configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

Affected configurations

Nvd

Node

asusrt-ax82uMatch-

AND

asusrt-ax82u_firmwareMatch3.0.0.4.386_49674-ge182230

VendorProductVersionCPE
asusrt-ax82u-cpe:2.3:h:asus:rt-ax82u:-:*:*:*:*:*:*:*
asusrt-ax82u_firmware3.0.0.4.386_49674-ge182230cpe:2.3:o:asus:rt-ax82u_firmware:3.0.0.4.386_49674-ge182230:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asus	rt-ax82u	-	cpe:2.3:h:asus:rt-ax82u:-:::::::*
asus	rt-ax82u_firmware	3.0.0.4.386_49674-ge182230	cpe:2.3:o:asus:rt-ax82u_firmware:3.0.0.4.386_49674-ge182230:::::::*