Vulnerability CVE-2018-8826
Published: 2018-04-20

Description:
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
ASUS -> Rt-ac1200 firmware 
ASUS -> Rt-ac1750 firmware 
ASUS -> Rt-ac2900 firmware 
ASUS -> Rt-ac51u firmware 
ASUS -> Rt-ac52u b1 firmware 
ASUS -> Rt-ac55u firmware 
ASUS -> Rt-ac55uhp firmware 
ASUS -> Rt-ac58u firmware 
ASUS -> Rt-ac66u firmware 
ASUS -> Rt-ac86u firmware 
ASUS -> Rt-acrh13 firmware 
ASUS -> Rt-n12 d1 firmware 
ASUS -> Rt-n600 firmware 

 References:
https://www.asus.com/ca-en/Networking/RT-N600/HelpDesk_Download/
https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS/
https://www.asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS/
https://www.asus.com/sg/Networking/RT-AC58U/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RT-AC1200/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RT-AC1750/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RT-AC86U/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RT-ACRH13/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RTAC66U/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RTN12_D1/HelpDesk_BIOS/
https://www.asus.com/us/Networking/RTN66W/HelpDesk_BIOS/
https://www.asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS/
https://www.asus.com/us/supportonly/RT-AC55U/HelpDesk_BIOS/
https://www.asus.com/us/supportonly/RT-AC55UHP/HelpDesk_BIOS/
Copyright 2024, cxsecurity.com

 

Back to Top