CVE-2022-38105

Name of the Vulnerable Software and Affected Versions Asus RT-AX82U version 3.0.0.4.386 49674-ge182230

Description An information disclosure issue exists in the cm processREQ NC opcode of the router's configuration service. A specially-crafted network packet can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this issue.

Recommendations For Asus RT-AX82U version 3.0.0.4.386 49674-ge182230, consider restricting access to the configuration service until a patch is available. As a temporary workaround, avoid using the cm processREQ NC opcode in the configuration service to minimize the risk of exploitation.