CVE-2018-8826

published 2018-04-20

CVE-2018-8826: ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600…

Priority P3 57 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
asus	rt-ac1200_firmware	—	—
asus	rt-ac1750_firmware	—	—
asus	rt-ac2900_firmware	—	—
asus	rt-ac51u_firmware	—	—
asus	rt-ac52u_b1_firmware	—	—
asus	rt-ac55u_firmware	—	—
asus	rt-ac55uhp_firmware	—	—
asus	rt-ac58u_firmware	—	—
asus	rt-ac66u_firmware	—	—
asus	rt-ac86u_firmware	—	—
asus	rt-acrh13_firmware	—	—
asus	rt-n12_d1_firmware	—	—
asus	rt-n600_firmware	—	—

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20