peter bassill · operator
$ cve CVE-2018-8826 JSON

CVE-2018-8826

9.8
CRITICAL · CVSS 3.0 · EPSS 4.2% (pctl 91)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware before 3.0.0.4.380.10446; RT-AC55U and RT-AC55UHP routers with firmware before 3.0.0.4.382.50276; RT-AC86U and RT-AC2900 routers with firmware before 3.0.0.4.384.20648; and possibly other RT-series routers allow remote attackers to execute arbitrary code via unspecified vectors.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS4.19% — more likely to be exploited than 91% of all CVEs
WeaknessCWE-20
On CISA KEVno
Public exploitnone known
Published2018-04-20
Last modified2026-06-17

Affected (26)

VendorProduct
asusrt-ac1200
asusrt-ac1200 firmware
asusrt-ac1750
asusrt-ac1750 firmware
asusrt-ac2900
asusrt-ac2900 firmware
asusrt-ac51u
asusrt-ac51u firmware
asusrt-ac52u b1
asusrt-ac52u b1 firmware
asusrt-ac55u
asusrt-ac55u firmware
asusrt-ac55uhp
asusrt-ac55uhp firmware
asusrt-ac58u
asusrt-ac58u firmware
asusrt-ac66u
asusrt-ac66u firmware
asusrt-ac86u
asusrt-ac86u firmware
asusrt-acrh13
asusrt-acrh13 firmware
asusrt-n12 d1
asusrt-n12 d1 firmware
asusrt-n600
asusrt-n600 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD