cve/2022/CVE-2022-26674.md

### [CVE-2022-26674](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26674)
![](https://img.shields.io/static/v1?label=Product&message=RT-AX88U&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%203.0.0.4.386.4606%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-134%20Use%20of%20Externally-Controlled%20Format%20String&color=brighgreen)

### Description

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/karimhabush/cyberowl