9.8
CRITICAL
CVE-2018-20334
ASUS Router Shell Injection Vulnerability
Description

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.

INFO

Published Date :

March 20, 2020, 1:15 a.m.

Last Modified :

March 23, 2020, 9:59 p.m.

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2018-20334 has a 1 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2018-20334 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Asus asuswrt
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2018-20334.

URL Resource
https://starlabs.sg/advisories/18-20334/ Exploit Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Repo contains driver for Asus PCE-AC88 (Broadcom BCM4366), extracted from Asus AC88U

Updated: 3 years, 8 months ago
1 stars 1 fork 1 watcher
Born at : July 19, 2019, 4:49 p.m. This repo has been linked 2 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-20334 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2018-20334 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Mar. 23, 2020

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:N/AC:L/Au:N/C:C/I:C/A:C)
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://starlabs.sg/advisories/18-20334/ No Types Assigned https://starlabs.sg/advisories/18-20334/ Exploit, Third Party Advisory
    Added CWE NIST CWE-78
    Added CPE Configuration AND OR *cpe:2.3:o:asus:asuswrt:3.0.0.4.384.20308:*:*:*:*:*:*:* OR cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:* cpe:2.3:h:asus:gt-ac5300:-:*:*:*:*:*:*:* cpe:2.3:h:asus:gt-ax11000:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1200:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1200_v2:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1200g:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1200ge:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac3200:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac51u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac55u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac56r:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac56s:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac56u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac66r:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac66u-b1:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-acrh12:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-acrh13:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-ax92u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-g32:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n10\+d1:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n10e:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n14u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n19:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n56r:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n600:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n65u:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n66r:-:*:*:*:*:*:*:* cpe:2.3:h:asus:rt-n66u:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2018-20334 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

1.35 }} -0.55%

score

0.84657

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability