CVE-2018-8877

published 2020-02-27

CVE-2018-8877: Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote…

Priority P4 28 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
asus	asus_firmware	< 3.0.0.4.382.50470	3.0.0.4.382.50470
asuswrt-merlin	asuswrt-merlin	< 384.4	384.4

CVSS provenance

nvd v3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200