CVE-2023-35720

ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mod_webdav.so module. When parsing a request, the process does not properly validate a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-16078.

• CWE-89

• https://www.asus.com/networking-iot-servers/whole-home-mesh-wifi-system/aimesh-wifi-routers-and-systems/rt-ax92u/helpdesk_bios/?model2Name=RT-AX92UProduct
• https://www.zerodayinitiative.com/advisories/ZDI-23-1166/Third Party Advisory
• https://www.asus.com/networking-iot-servers/whole-home-mesh-wifi-system/aimesh-wifi-routers-and-systems/rt-ax92u/helpdesk_bios/?model2Name=RT-AX92UProduct
• https://www.zerodayinitiative.com/advisories/ZDI-23-1166/Third Party Advisory

Published

May 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35715Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Re…7.8
• CVE-2023-35716Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remo…7.8
• CVE-2023-35717TP-Link Tapo C210 Password Recovery Authentication Bypass Vu…8.8
• CVE-2023-35718D-Link DAP-2622 DDP Change ID Password Auth Password Stack-b…8.8
• CVE-2023-35719ManageEngine ADSelfService Plus GINA Client Insufficient Ver…6.8
• CVE-2023-3572In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…10
• CVE-2023-35721NETGEAR Multiple Routers curl_post Improper Certificate Vali…8.8
• CVE-2023-35722NETGEAR RAX30 UPnP Command Injection Remote Code Execution V…8.8
• CVE-2023-35723D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remot…8.8
• CVE-2023-35724D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Auth…8.8
• CVE-2023-35725D-Link DAP-2622 DDP User Verification Auth Username Stack-ba…8.8
• CVE-2023-35726D-Link DAP-2622 DDP User Verification Auth Password Stack-ba…8.8