CVE-2022-26669
ASUS Control Center - SQL Injection
- State
- Published
- Severity
- 8.8 High
- Published
- Jun 20, 2022
- Updated
- Sep 17, 2024
- Reserved
- Mar 8, 2022
Description
ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
Control CenterASUS |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.