ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability

CVE-2023-35720

What is CVE-2023-35720?

The ASUS RT-AX92U router contains a vulnerability within the mod_webdav.so module that can be exploited by network-adjacent attackers to disclose sensitive information. This vulnerability arises during the processing of requests, where the system fails to properly validate user-supplied input before using it in SQL queries. As a result, malicious actors can exploit this flaw without the need for authentication, allowing for unauthorized access to critical information within the system's context.

References