Unrated severityNVD Advisory· Published Feb 27, 2020· Updated Aug 5, 2024
CVE-2018-8877
CVE-2018-8877
Description
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.
Affected products
2- ASUS/Asuswrt-Merlin firmwaredescription
- Range: <384.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.mdmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.