Vulnerability Details CVE-2022-38105
An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packets can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.7%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-38105
-
cpe:2.3:h:asus:rt-ax82u:-
-
cpe:2.3:o:asus:rt-ax82u_firmware:3.0.0.4.386_49674-ge182230