Vulnerability Intelligence Report
CVE-2018-8826
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:4.27%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asus | rt-ac51u_firmware | 3.0.0.4.380.8228 |
| asus | rt-ac51u | all |
| asus | rt-ac58u_firmware | 3.0.0.4.380.8228 |
| asus | rt-ac58u | all |
| asus | rt-ac66u_firmware | 3.0.0.4.380.8228 |
| asus | rt-ac66u | all |
| asus | rt-ac1750_firmware | 3.0.0.4.380.8228 |
| asus | rt-ac1750 | all |
| asus | rt-n12_d1_firmware | 3.0.0.4.380.8228 |
| asus | rt-n12_d1 | all |
| asus | rt-ac52u_b1_firmware | 3.0.0.4.380.10446 |
| asus | rt-ac52u_b1 | all |
| asus | rt-ac1200_firmware | 3.0.0.4.380.10446 |
| asus | rt-ac1200 | all |
| asus | rt-n600_firmware | 3.0.0.4.380.10446 |
| asus | rt-n600 | all |
| asus | rt-ac55u_firmware | 3.0.0.4.382.50276 |
| asus | rt-ac55u | all |
| asus | rt-ac55uhp_firmware | 3.0.0.4.382.50276 |
| asus | rt-ac55uhp | all |
| asus | rt-ac86u_firmware | 3.0.0.4.384.20648 |
| asus | rt-ac86u | all |
| asus | rt-acrh13_firmware | 3.0.0.4.380.8228 |
| asus | rt-acrh13 | all |
| asus | rt-ac2900_firmware | 3.0.0.4.384.20648 |
| asus | rt-ac2900 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.271%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2018-03-20T00:00:00 |
| Published | 2018-04-20T20:00:00 |
| Patch Date | 2018-03-28 |
| Last Updated | 2024-08-05T07:02:26 |
Community Chatter & Buzz