Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ASUS RT-AX56U - Path Traversal
Vulnerability Description
ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
ASUS RT-AX56U 路径遍历漏洞
Vulnerability Description
ASUS RT-AX56U是中国台湾华硕（ASUS）公司的一款无线路由器。 ASUS RT-AX56U存在安全漏洞，该漏洞源于ASUS RT-AX56U的登录功能对URL参数中的特殊字符过滤不足，导致路径遍历漏洞，允许未经身份验证的局域网攻击者可利用该漏洞访问受限制的系统路径并下载任意文件。
CVSS Information
N/A
Vulnerability Type
N/A