VYPR
← All advisories
High severity8.1NVD Advisory· Published Apr 7, 2022· Updated Jun 17, 2026

CVE-2022-23970

CVE-2022-23970

Description

ASUS RT-AX56U’s update_json function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Asus/RT-AX56U V2llm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 3.0.0.4.386.45898

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.