CVE-2018-5999

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

87.26%

Published

Jan 22, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (3)

All weaponized →

Exploit-DBAsusWRT LAN - Remote Code Execution (Metasploit)Exploit-DBAsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.

Affected Products (1)

asus · asuswrt (up to 3.0.0.4.384_10007)vulnerable

References (10)

https://blogs.securiteam.com/index.php/archives/3589

ExploitTechnical DescriptionThird Party Advisory

https://github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt

ExploitThird Party Advisory

https://raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/43881/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/44176/

https://blogs.securiteam.com/index.php/archives/3589

ExploitTechnical DescriptionThird Party Advisory

https://github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt

ExploitThird Party Advisory

https://raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb

ExploitThird Party Advisory

https://www.exploit-db.com/exploits/43881/

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/44176/

KEV Catalog EPSS Scores Vendors All CVEs