CVE-2018-20333

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.
References
Link Resource
https://starlabs.sg/advisories/18-20333/ Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:asus:asuswrt:3.0.0.4.384.20308:*:*:*:*:*:*:*
OR cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:gt-ac5300:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:gt-ax11000:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1200:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1200_v2:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1200g:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1200ge:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac56s:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac3200:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac51u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac55u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-acrh13:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac56r:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac66r:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac66u-b1:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac56u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-acrh12:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n65u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n14u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n10e:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-g32:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n66u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n600:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n10\+d1:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n56r:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n66r:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-ax92u:-:*:*:*:*:*:*:*
cpe:2.3:h:asus:rt-n19:-:*:*:*:*:*:*:*

Information

Published : 2020-03-19 18:15

Updated : 2020-03-23 14:51


NVD link : CVE-2018-20333

Mitre link : CVE-2018-20333


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

asus

  • rt-ac55u
  • rt-n14u
  • rt-n56r
  • rt-ax92u
  • rt-ac87u
  • rt-n65u
  • rt-ac3100
  • rt-ac1750
  • rt-ac1200_v2
  • rt-n16
  • rt-ac51u
  • rt-ac56r
  • rt-ac56s
  • rt-acrh13
  • rt-ac1750_b1
  • rt-n66u
  • rt-ac86u
  • rt-ac3200
  • rt-n10e
  • rt-ac1200ge
  • rt-g32
  • rt-ac68p
  • gt-ax11000
  • rt-ac56u
  • rt-n56u
  • rt-ax58u
  • rt-ac1200
  • rt-ax88u
  • rt-ac1900p
  • rt-ac66r
  • rt-ac66u-b1
  • rt-n66r
  • rt-ac5300
  • rt-n19
  • rt-n600
  • rt-ac66u
  • rt-ac88u
  • rt-acrh12
  • rt-ax3000
  • rt-ax56u
  • gt-ac5300
  • rt-ac1200g
  • asuswrt
  • rt-ac68u
  • gt-ac2900
  • rt-ac66u_b1
  • rt-n10\+d1