CVE-2018-5999: asus asuswrt

EPSS trend

Probability

87.64%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.37 pp

From 87.26% on 19-09-2026

19-09-202619-10-2026

EPSS score

87.64%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found

githubUnverified
Poc
Maturity: poc
referenceUnverified
Exploit Reference (blogs.securiteam.com)
Maturity: unknown
referenceUnverified
Exploit Reference (raw.githubusercontent.com)
Maturity: unknown

Show all 6 exploits

exploit-databaseremotehardwareVerified
AsusWRT LAN - Remote Code Execution (Metasploit)
Maturity: weaponized
exploit-databaseremotehardwareUnverified
AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution
Maturity: poc
MetasploitremoteVerified
AsusWRT LAN Unauthenticated Remote Code Execution
exploit/linux/http/asuswrt_lan_rce
Maturity: weaponized

References

5 links

github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txtX Refsource MISCExploitThird Party Advisory
www.exploit-db.com/exploits/44176/ExploitX Refsource EXPLOIT DB
blogs.securiteam.com/index.php/archives/3589X Refsource MISCExploitTechnical DescriptionThird Party Advisory
www.exploit-db.com/exploits/43881/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rbX Refsource MISCExploitThird Party Advisory

Related vulnerabilities

CVE-2018-20333asusasuswrt1.21%6y ago20-03-2020 00:11An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.CVE-2018-20335asusasuswrt1.41%6y ago20-03-2020 00:11An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.CVE-2018-20334asusasuswrt3.77%6y ago20-03-2020 00:11An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.CVE-2018-6000asusasuswrt85.16%8y ago22-01-2018 20:00An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon (or enable infosvr command mode), and consequently obtain remote administrative access, via a crafted request. This is available to unauthenticated attackers in conjunction with CVE-2018-5999.CVE-2022-26376asusasuswrt+191.41%4y ago05-08-2022 21:18A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7.. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.CVE-2017-15656asusasuswrt1.47%8y ago31-01-2018 20:00Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.

All vulnerabilities inasuswrt

CVE-2018-5999: asus asuswrt

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References