PT-2018-14392 · Asus · Asus Rt-Ac58U

Published 2018-10-14 · Updated 2019-01-23 · CVE-2018-18287

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASUS RT-AC58U version 3.0.0.4.380 6516

Description The issue allows remote attackers to discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the "Main Login.asp" page.

Recommendations For version 3.0.0.4.380 6516, consider restricting access to the Main Login.asp page to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-18287

Affected Products

Asus Rt-Ac58U

References · 3

• 🔥 https://github.com/remix30303/AsusLeak · Exploit
• https://osv.dev/vulnerability/CVE-2018-18287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18287 · Security Note