VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 20, 2020· Updated Aug 5, 2024

CVE-2018-20334

CVE-2018-20334

Description

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.

Affected products

2
  • ASUSWRT/ASUSWRTdescription
  • Asus/Asuswrtllm-fuzzy
    Range: = 3.0.0.4.384.20308

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.