PT-2018-18647 · Asus · Asus Rt-N600+11

Published 2018-04-20 · Updated 2018-05-24 · CVE-2018-8826

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS RT-AC51U versions prior to 3.0.0.4.380.8228 ASUS RT-AC52U B1 versions prior to 3.0.0.4.380.10446 ASUS RT-AC55U versions prior to 3.0.0.4.382.50276 ASUS RT-AC55UHP versions prior to 3.0.0.4.382.50276 ASUS RT-AC58U versions prior to 3.0.0.4.380.8228 ASUS RT-AC66U versions prior to 3.0.0.4.380.8228 ASUS RT-AC86U versions prior to 3.0.0.4.384.20648 ASUS RT-AC1200 versions prior to 3.0.0.4.380.10446 ASUS RT-AC1750 versions prior to 3.0.0.4.380.8228 ASUS RT-AC2900 versions prior to 3.0.0.4.384.20648 ASUS RT-ACRH13 versions prior to 3.0.0.4.380.8228 ASUS RT-N12 D1 versions prior to 3.0.0.4.380.8228 ASUS RT-N600 versions prior to 3.0.0.4.380.10446

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations ASUS RT-AC51U: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-AC52U B1: Update to firmware version 3.0.0.4.380.10446 or later. ASUS RT-AC55U: Update to firmware version 3.0.0.4.382.50276 or later. ASUS RT-AC55UHP: Update to firmware version 3.0.0.4.382.50276 or later. ASUS RT-AC58U: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-AC66U: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-AC86U: Update to firmware version 3.0.0.4.384.20648 or later. ASUS RT-AC1200: Update to firmware version 3.0.0.4.380.10446 or later. ASUS RT-AC1750: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-AC2900: Update to firmware version 3.0.0.4.384.20648 or later. ASUS RT-ACRH13: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-N12 D1: Update to firmware version 3.0.0.4.380.8228 or later. ASUS RT-N600: Update to firmware version 3.0.0.4.380.10446 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-8826

Affected Products

Asus Rt-Ac1200

Asus Rt-Ac1750

Asus Rt-Ac2900

Asus Rt-Ac51U

Asus Rt-Ac52U B1

Asus Rt-Ac55U

Asus Rt-Ac58U

Asus Rt-Ac66U

Asus Rt-Ac86U

Asus Rt-Acrh13

Asus Rt-N12+ B1

Asus Rt-N600

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2018-8826 · Security Note
• https://asus.com/us/Networking/RT-ACRH13/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/ca-en/Networking/RT-N600/HelpDesk_Download · Vendor Advisory
• https://asus.com/us/Networking/RT-AC1750/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/sg/Networking/RT-AC58U/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/Networking/RTN66W/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/Networking/RT-AC1200/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/Networking/RTN12_D1/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/Networking/RTAC66U/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/supportonly/RT-AC55UHP/HelpDesk_BIOS · Vendor Advisory
• https://asus.com/us/Networking/RT-AC86U/HelpDesk_BIOS · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8826 · Vendor Advisory
• https://asus.com/Networking/RT-AC2900/HelpDesk_BIOS · Vendor Advisory