Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-20334

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.

Published

2020-03-20T01:15:22.357

Last Modified

2024-11-21T04:01:15.487

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System asus asuswrt 3.0.0.4.384.20308 Yes
Hardware asus gt-ac2900 - No
Hardware asus gt-ac5300 - No
Hardware asus gt-ax11000 - No
Hardware asus rt-ac1200 - No
Hardware asus rt-ac1200_v2 - No
Hardware asus rt-ac1200g - No
Hardware asus rt-ac1200ge - No
Hardware asus rt-ac1750 - No
Hardware asus rt-ac1750_b1 - No
Hardware asus rt-ac1900p - No
Hardware asus rt-ac3100 - No
Hardware asus rt-ac3200 - No
Hardware asus rt-ac51u - No
Hardware asus rt-ac5300 - No
Hardware asus rt-ac55u - No
Hardware asus rt-ac56r - No
Hardware asus rt-ac56s - No
Hardware asus rt-ac56u - No
Hardware asus rt-ac66r - No
Hardware asus rt-ac66u - No
Hardware asus rt-ac66u-b1 - No
Hardware asus rt-ac66u_b1 - No
Hardware asus rt-ac68p - No
Hardware asus rt-ac68u - No
Hardware asus rt-ac86u - No
Hardware asus rt-ac87u - No
Hardware asus rt-ac88u - No
Hardware asus rt-acrh12 - No
Hardware asus rt-acrh13 - No
Hardware asus rt-ax3000 - No
Hardware asus rt-ax56u - No
Hardware asus rt-ax58u - No
Hardware asus rt-ax88u - No
Hardware asus rt-ax92u - No
Hardware asus rt-g32 - No
Hardware asus rt-n10\+d1 - No
Hardware asus rt-n10e - No
Hardware asus rt-n14u - No
Hardware asus rt-n16 - No
Hardware asus rt-n19 - No
Hardware asus rt-n56r - No
Hardware asus rt-n56u - No
Hardware asus rt-n600 - No
Hardware asus rt-n65u - No
Hardware asus rt-n66r - No
Hardware asus rt-n66u - No
References