CVE-2018-5999
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.
| Software | From | Fixed in |
|---|---|---|
| asus / asuswrt | - | 3.0.0.4.384_10007 |
- https://blogs.securiteam.com/index.php/archives/3589
- https://github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt
- https://raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb
- https://www.exploit-db.com/exploits/43881/
- https://www.exploit-db.com/exploits/44176/
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime