CVE-2018-8826

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

Los routers ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13 y RT-N12 D1 con firmware anterior a 3.0.0.4.380.8228; los routers RT-AC52U B1, RT-AC1200 y RT-N600 con firmware anterior a 3.0.0.4.380.10446; los routers RT-AC55U y RT-AC55UHP con firmware anterior a 3.0.0.4.382.50276; los routers RT-AC86U y RT-AC2900 con firmware anterior a 3.0.0.4.384.20648; y posiblemente otros routers de la serie RT, permiten que atacantes remotos ejecuten código arbitrario mediante vectores sin especificar.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-03-20 CVE Reserved
2018-04-20 CVE Published
2024-03-30 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (14)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS	2018-05-24
https://www.asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS	2018-05-24
https://www.asus.com/ca-en/Networking/RT-N600/HelpDesk_Download	2018-05-24
https://www.asus.com/sg/Networking/RT-AC58U/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RT-AC1200/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RT-AC1750/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RT-AC86U/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RT-ACRH13/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RTAC66U/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RTN12_D1/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/Networking/RTN66W/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/supportonly/RT-AC55U/HelpDesk_BIOS	2018-05-24
https://www.asus.com/us/supportonly/RT-AC55UHP/HelpDesk_BIOS	2018-05-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Asus Search vendor "Asus"	Rt-ac51u Firmware Search vendor "Asus" for product "Rt-ac51u Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-ac51u Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac51u Search vendor "Asus" for product "Rt-ac51u"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac58u Firmware Search vendor "Asus" for product "Rt-ac58u Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-ac58u Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac58u Search vendor "Asus" for product "Rt-ac58u"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac66u Firmware Search vendor "Asus" for product "Rt-ac66u Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-ac66u Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac66u Search vendor "Asus" for product "Rt-ac66u"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac1750 Firmware Search vendor "Asus" for product "Rt-ac1750 Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-ac1750 Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac1750 Search vendor "Asus" for product "Rt-ac1750"	-	-	Safe
Asus Search vendor "Asus"	Rt-n12 D1 Firmware Search vendor "Asus" for product "Rt-n12 D1 Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-n12 D1 Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-n12 D1 Search vendor "Asus" for product "Rt-n12 D1"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac52u B1 Firmware Search vendor "Asus" for product "Rt-ac52u B1 Firmware"	3.0.0.4.380.10446 Search vendor "Asus" for product "Rt-ac52u B1 Firmware" and version "3.0.0.4.380.10446"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac52u B1 Search vendor "Asus" for product "Rt-ac52u B1"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac1200 Firmware Search vendor "Asus" for product "Rt-ac1200 Firmware"	3.0.0.4.380.10446 Search vendor "Asus" for product "Rt-ac1200 Firmware" and version "3.0.0.4.380.10446"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac1200 Search vendor "Asus" for product "Rt-ac1200"	-	-	Safe
Asus Search vendor "Asus"	Rt-n600 Firmware Search vendor "Asus" for product "Rt-n600 Firmware"	3.0.0.4.380.10446 Search vendor "Asus" for product "Rt-n600 Firmware" and version "3.0.0.4.380.10446"	-	Affected	in	Asus Search vendor "Asus"	Rt-n600 Search vendor "Asus" for product "Rt-n600"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac55u Firmware Search vendor "Asus" for product "Rt-ac55u Firmware"	3.0.0.4.382.50276 Search vendor "Asus" for product "Rt-ac55u Firmware" and version "3.0.0.4.382.50276"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac55u Search vendor "Asus" for product "Rt-ac55u"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac55uhp Firmware Search vendor "Asus" for product "Rt-ac55uhp Firmware"	3.0.0.4.382.50276 Search vendor "Asus" for product "Rt-ac55uhp Firmware" and version "3.0.0.4.382.50276"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac55uhp Search vendor "Asus" for product "Rt-ac55uhp"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac86u Firmware Search vendor "Asus" for product "Rt-ac86u Firmware"	3.0.0.4.384.20648 Search vendor "Asus" for product "Rt-ac86u Firmware" and version "3.0.0.4.384.20648"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac86u Search vendor "Asus" for product "Rt-ac86u"	-	-	Safe
Asus Search vendor "Asus"	Rt-acrh13 Firmware Search vendor "Asus" for product "Rt-acrh13 Firmware"	3.0.0.4.380.8228 Search vendor "Asus" for product "Rt-acrh13 Firmware" and version "3.0.0.4.380.8228"	-	Affected	in	Asus Search vendor "Asus"	Rt-acrh13 Search vendor "Asus" for product "Rt-acrh13"	-	-	Safe
Asus Search vendor "Asus"	Rt-ac2900 Firmware Search vendor "Asus" for product "Rt-ac2900 Firmware"	3.0.0.4.384.20648 Search vendor "Asus" for product "Rt-ac2900 Firmware" and version "3.0.0.4.384.20648"	-	Affected	in	Asus Search vendor "Asus"	Rt-ac2900 Search vendor "Asus" for product "Rt-ac2900"	-	-	Safe