Unrated severityNVD Advisory· Published Feb 27, 2020· Updated Aug 5, 2024
CVE-2018-8878
CVE-2018-8878
Description
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.
Affected products
2- ASUS/Asuswrt-Merlin firmwaredescription
- Range: <384.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/outofhere/Research/blob/master/2018/Asus/cve_notes.mdmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.