CVE-2018-8826 — CRITICAL (9.8)

Vulnerability Description

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Asus	Rt-Ac51U Firmware	3.0.0.4.380.8228
Asus	Rt-Ac51U	-
Asus	Rt-Ac58U Firmware	3.0.0.4.380.8228
Asus	Rt-Ac58U	-
Asus	Rt-Ac66U Firmware	3.0.0.4.380.8228
Asus	Rt-Ac66U	-
Asus	Rt-Ac1750 Firmware	3.0.0.4.380.8228
Asus	Rt-Ac1750	-
Asus	Rt-N12 D1 Firmware	3.0.0.4.380.8228
Asus	Rt-N12 D1	-
Asus	Rt-Ac52U B1 Firmware	3.0.0.4.380.10446
Asus	Rt-Ac52U B1	-
Asus	Rt-Ac1200 Firmware	3.0.0.4.380.10446
Asus	Rt-Ac1200	-
Asus	Rt-N600 Firmware	3.0.0.4.380.10446
Asus	Rt-N600	-
Asus	Rt-Ac55U Firmware	3.0.0.4.382.50276
Asus	Rt-Ac55U	-
Asus	Rt-Ac55Uhp Firmware	3.0.0.4.382.50276
Asus	Rt-Ac55Uhp	-

Related Weaknesses (CWE)

CWE-20

References

https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/Networking/RT-AC52U-B1/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/ca-en/Networking/RT-N600/HelpDesk_Download/Vendor Advisory
https://www.asus.com/sg/Networking/RT-AC58U/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RT-AC1200/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RT-AC1750/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RT-AC86U/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RT-ACRH13/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RTAC66U/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RTN12_D1/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/Networking/RTN66W/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/supportonly/RT-AC51U/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/supportonly/RT-AC55U/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/us/supportonly/RT-AC55UHP/HelpDesk_BIOS/Vendor Advisory
https://www.asus.com/Networking/RT-AC2900/HelpDesk_BIOS/Vendor Advisory

FAQ

What is CVE-2018-8826?

CVE-2018-8826 is a vulnerability with a CVSS score of 9.8 (CRITICAL). ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446;...

How severe is CVE-2018-8826?

CVE-2018-8826 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2018-8826?

Check the references section above for vendor advisories and patch information. Affected products include: Asus Rt-Ac51U Firmware, Asus Rt-Ac51U, Asus Rt-Ac58U Firmware, Asus Rt-Ac58U, Asus Rt-Ac66U Firmware.