Information Disclosure Vulnerability in Asus RT-AX82U Router

CVE-2022-38105

What is CVE-2022-38105?

An information disclosure vulnerability has been identified in the configuration service of the Asus RT-AX82U router. This vulnerability stems from the cm_processREQ_NC opcode, which can be exploited through specially-crafted network packets. When an attacker sends a malicious network request, they may gain access to sensitive information from the router, potentially compromising the privacy and security of the affected network.

References