PT-2018-14392 · Asus · Asus Rt-Ac58U

Publicado 2018-10-14 · Atualizado 2019-01-23 · CVE-2018-18287

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-AC58U version 3.0.0.4.380 6516

Description The issue allows remote attackers to discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the "Main Login.asp" page.

Recommendations For version 3.0.0.4.380 6516, consider restricting access to the Main Login.asp page to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-18287

Produtos afetados

Asus Rt-Ac58U

Referências · 3

• 🔥 https://github.com/remix30303/AsusLeak · Exploit
• https://osv.dev/vulnerability/CVE-2018-18287 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18287 · Nota de Segurança