7.8

CVE-2018-20335

Exploit

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asus ≫ Asuswrt Version3.0.0.4.384.20308
   Asus ≫ Gt-ac2900 Version-
   Asus ≫ Gt-ac5300 Version-
   Asus ≫ Gt-ax11000 Version-
   Asus ≫ Rt-ac1200 Version-
   Asus ≫ Rt-ac1200 V2 Version-
   Asus ≫ Rt-ac1200g Version-
   Asus ≫ Rt-ac1200ge Version-
   Asus ≫ Rt-ac1750 Version-
   Asus ≫ Rt-ac1750 B1 Version-
   Asus ≫ Rt-ac1900p Version-
   Asus ≫ Rt-ac3100 Version-
   Asus ≫ Rt-ac3200 Version-
   Asus ≫ Rt-ac51u Version-
   Asus ≫ Rt-ac5300 Version-
   Asus ≫ Rt-ac55u Version-
   Asus ≫ Rt-ac56r Version-
   Asus ≫ Rt-ac56s Version-
   Asus ≫ Rt-ac56u Version-
   Asus ≫ Rt-ac66r Version-
   Asus ≫ Rt-ac66u Version-
   Asus ≫ Rt-ac66u-b1 Version-
   Asus ≫ Rt-ac66u B1 Version-
   Asus ≫ Rt-ac68p Version-
   Asus ≫ Rt-ac68u Version-
   Asus ≫ Rt-ac86u Version-
   Asus ≫ Rt-ac87u Version-
   Asus ≫ Rt-ac88u Version-
   Asus ≫ Rt-acrh12 Version-
   Asus ≫ Rt-acrh13 Version-
   Asus ≫ Rt-ax3000 Version-
   Asus ≫ Rt-ax56u Version-
   Asus ≫ Rt-ax58u Version-
   Asus ≫ Rt-ax88u Version-
   Asus ≫ Rt-ax92u Version-
   Asus ≫ Rt-g32 Version-
   Asus ≫ Rt-n10+d1 Version-
   Asus ≫ Rt-n10e Version-
   Asus ≫ Rt-n14u Version-
   Asus ≫ Rt-n16 Version-
   Asus ≫ Rt-n19 Version-
   Asus ≫ Rt-n56r Version-
   Asus ≫ Rt-n56u Version-
   Asus ≫ Rt-n600 Version-
   Asus ≫ Rt-n65u Version-
   Asus ≫ Rt-n66r Version-
   Asus ≫ Rt-n66u Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.813
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://starlabs.sg/advisories/18-20335/
Third Party Advisory
Exploit