VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2022· Updated Sep 16, 2024

ASUS WebStorage - Use of Hard-coded Credentials

CVE-2022-26672

Description

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modify or delete this user account information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Asus/WebStoragellm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

1

News mentions

0

No linked articles in our index yet.