CVE-2018-5999 in the critical feed json
An issue was discovered in AsusWRT before 3.0.0.4.384_10007.
published 2018-01-22 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-17764
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 87.5%
- EPSS 87.5% chance of exploitation in 30 days, percentile 99.7%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.
Patch / fix
- asus asuswrt 3.0.0.4.384_10007
Timeline
- First public exploit (Metasploit exploit/linux/http/asuswrt_lan_rce)
- Published
Exploit prediction
87.53% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/linux/http/asuswrt_lan_rce AsusWRT LAN Unauthenticated Remote Code Execution metasploit exploit, excellent rank, 2018-01-22
- EDB-44176 AsusWRT LAN - Remote Code Execution (Metasploit) remote, 2018-02-26
- EDB-43881 AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution remote, 2018-01-22
- github.com https://github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt referenced PoC, tagged "exploit" by a source, unverified
- blogs.securiteam.com https://blogs.securiteam.com/index.php/archives/3589 referenced PoC, tagged "exploit" by a source, unverified
- raw.githubusercontent.com https://raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
exploit-db.com
/exploits/44176/
exploit
-
exploit-db.com
/exploits/43881/
exploit, third-party-advisory, vdb-entry
-
github.com
/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt
exploit, third-party-advisory
-
blogs.securiteam.com
/index.php/archives/3589
exploit, technical-description, third-party-advisory
-
raw.githubusercontent.com
/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb
exploit, third-party-advisory
Sources
- CVE List CVE-2018-5999
- NVD CVE-2018-5999
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.