1. Home
  2. CVE Database
  3. CVE-2022-26669
HIGH · 8.8

CVE-2022-26669

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access ...

Vulnerability Description

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AsusControl Center1.4.2.5

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2022-26669?

CVE-2022-26669 is a vulnerability with a CVSS score of 8.8 (HIGH). ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access ...

How severe is CVE-2022-26669?

CVE-2022-26669 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-26669?

Check the references section above for vendor advisories and patch information. Affected products include: Asus Control Center.