CVE-2022-25597 medium Priorität · verfolgen · 35 EPSS 0.008 · 56. Perzentil EPSS 0.8% Wahrscheinlichkeit 0.008 Perzentil 56. Perzentil EPSS · Exploit-Vorhersage — Wahrscheinlichkeit, dass diese CVE in den nächsten 30 Tagen ausgenutzt wird (0–1), sowie ihr Perzentilrang unter allen CVEs EU RU US grimoire priority P3 · Track
0.78% (56th) EPSS
CVSS 5.8 · medium
4 sources
cnnvd · enisa_euvd · fstec_bdu · nvd
EPSS · bewertet 2026-10-27
ASUS RT-AC86U’s LPD service has insufficient filtering for special characters in the user request, which allows an unauthenticated LAN attacker to perform command injection attack, execute arbitrary commands and disrupt or terminate service.
umfeld Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen ⚠ Quellen uneinig · medium–high · 5.8–8.8
v2.0 5.8 medium AV:A/AC:L/Au:N/C:P/I:P/A:P CVSS v2.0 5.8 medium Access Vector Adjacent Network Access Complexity Low Authentication None Confidentiality Impact Partial Integrity Impact Partial Availability Impact Partial primary · NVD / NIST US Ausnutzbarkeit 6.5 · Auswirkung 6.4 v3.1 8.8 high CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Adjacent Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High primary · NVD / NIST US Ausnutzbarkeit 2.8 · Auswirkung 5.9 v3.1 8.8 high AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Access Vector Adjacent Network Access Complexity Low secondary · FSTEC (BDU) RU v3.1 8.8 high CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Adjacent Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · ENISA EU v3.1 8.8 high CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 8.8 high Attack Vector Adjacent Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · twcert@cert.org.tw Ausnutzbarkeit 2.8 · Auswirkung 5.9 v3.1 8.1 high CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U CVSS v3.1 8.1 high Attack Vector Adjacent Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality Impact High Integrity Impact High Availability Impact High secondary · CVSS-BT (t0sche) Weitere Namen und Kennungen dieser Entität.
Externe Belege — Patches, Meldungen, Analysen.
← zurück zur Suche