CVE-2022-38393

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-01-10 · updated 2026-06-17
Weakness: CWE-125

Description

A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

Asus RT-AX82U: 3.0.0.4.386_49674-ge182230

References

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1592
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1592
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1592

Get alerted when CVE-2022-38393 or the next vulnerability affects your stack