What’s Vulnerable › Vulnerabilities

CVE-2022-25596: ASUS RT-AC86U - Heap-based buffer overflow

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-07 · updated 2026-06-17
• Weakness: CWE-787

Description

ASUS RT-AC56U’s configuration function has a heap-based buffer overflow vulnerability due to insufficient validation for the decryption parameter length, which allows an unauthenticated LAN attacker to execute arbitrary code, perform arbitrary operations and disrupt service.

Affected products

• ASUS RT-AC86U: 3.0.0.4.386.45956

References

• https://www.twcert.org.tw/tw/cp-132-5793-4f9d3-1.html
• https://www.twcert.org.tw/tw/cp-132-5793-4f9d3-1.html

Get alerted when CVE-2022-25596 or the next vulnerability affects your stack