CVE-2022-38393: asus rt-ax82u_firmware Out-of-bounds Read
Vulnerability summary
CVE-2022-38393 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in asus rt-ax82u_firmware. EPSS estimates a 18.85% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 10-01-2023PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
18.85%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 18.85% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (talosintelligence.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Asus1 product
- rt-ax82u_firmware3.0.0.4.386_49674-ge182230
1 vendor · 1 product