PT-2018-10608 · Asus · Asus Hg100

Mars Cheng · Published 2018-07-25 · Updated 2018-09-20 · CVE-2018-11491

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS HG100 devices with firmware prior to 1.05.12

Description The issue allows unauthenticated access, which can lead to remote command execution.

Recommendations For ASUS HG100 devices with firmware prior to 1.05.12, update the firmware to version 1.05.12 or later to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-11491

Affected Products

Asus Hg100

References · 4

• 🔥 https://mars-cheng.github.io/blog/2018/CVE-2018-11491 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-11491 · Security Note
• https://asus.com/tw/News/qnEosWKPVDpmOeqL · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11491 · Vendor Advisory