EUVD-2026-44584
GHSA-f2xq-6hc9-3p2f
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible management interface requires admin authentication (PR:H) and active validation bypass (AC:H); impact is confidentiality-only with no scope change.
Primary rating from Vendor (ASUS).
CVSS VectorVendor: ASUS
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
1DescriptionCVE.org
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
AnalysisAI
SQL injection in the web management interface of multiple ASUS router models enables a remotely authenticated, high-privilege user to exfiltrate confidential information by sending crafted requests that bypass the router's existing input validation. The vulnerability is limited to read-only data disclosure (no integrity or availability impact) and requires prior administrative authentication, significantly constraining real-world exploitability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active, authenticated session with high-privilege (administrator-level) access to the ASUS router web management interface - PR:H in the CVSS 4.0 vector confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate-to-low despite the high confidentiality impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has acquired high-privilege (administrator-level) credentials to an ASUS router - through password reuse, phishing, brute-force of a weak admin password, or a separate credential compromise - logs into the web management interface and submits a specially crafted HTTP request containing SQL metacharacters engineered to bypass the router's existing input filters. The malformed query causes the backend database to return sensitive stored data - potentially including VPN pre-shared keys, stored credentials, DDNS credentials, or internal network configuration - which is returned in the HTTP response. … |
| Remediation | Apply the firmware updates identified in the ASUS Security Advisory ('Security Update for ASUS Router Firmware' section) at https://www.asus.com/security-advisory/ - this is the only confirmed fix, and exact patched firmware versions must be obtained directly from ASUS since no specific version number is available in current source data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated
The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation
Remote command execution in certain ASUS router firmware allows a network man-in-the-middle attacker to force the router
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Web management interface of ASUS router models that allo
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today