Vulnerability Intelligence Report
CVE-2018-20333
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:1.21%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asus | asuswrt | 3.0.0.4.384.20308 |
| asus | gt-ac2900 | all |
| asus | gt-ac5300 | all |
| asus | gt-ax11000 | all |
| asus | rt-ac1200 | all |
| asus | rt-ac1200_v2 | all |
| asus | rt-ac1200g | all |
| asus | rt-ac1200ge | all |
| asus | rt-ac1750 | all |
| asus | rt-ac1750_b1 | all |
| asus | rt-ac1900p | all |
| asus | rt-ac3100 | all |
| asus | rt-ac3200 | all |
| asus | rt-ac51u | all |
| asus | rt-ac5300 | all |
| asus | rt-ac55u | all |
| asus | rt-ac56r | all |
| asus | rt-ac56s | all |
| asus | rt-ac56u | all |
| asus | rt-ac66r | all |
| asus | rt-ac66u | all |
| asus | rt-ac66u-b1 | all |
| asus | rt-ac66u_b1 | all |
| asus | rt-ac68p | all |
| asus | rt-ac68u | all |
| asus | rt-ac86u | all |
| asus | rt-ac87u | all |
| asus | rt-ac88u | all |
| asus | rt-acrh12 | all |
| asus | rt-acrh13 | all |
| asus | rt-ax3000 | all |
| asus | rt-ax56u | all |
| asus | rt-ax58u | all |
| asus | rt-ax88u | all |
| asus | rt-ax92u | all |
| asus | rt-g32 | all |
| asus | rt-n10\+d1 | all |
| asus | rt-n10e | all |
| asus | rt-n14u | all |
| asus | rt-n16 | all |
| asus | rt-n19 | all |
| asus | rt-n56r | all |
| asus | rt-n56u | all |
| asus | rt-n600 | all |
| asus | rt-n65u | all |
| asus | rt-n66r | all |
| asus | rt-n66u | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.209%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2018-12-21T00:00:00 |
| Published | 2020-03-20T00:11:15 |
| Last Updated | 2024-08-05T11:58:19 |
Community Chatter & Buzz