Vulnerability Details CVE-2022-25597
ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 5.8
References
Products affected by CVE-2022-25597
-
cpe:2.3:h:asus:rt-ac86u:-
-
cpe:2.3:o:asus:rt-ac86u_firmware:3.0.0.4.386.45956