cve/2018/CVE-2018-5999.md

CVE-2018-5999

Description

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.

POC

Reference

• https://github.com/pedrib/PoC/blob/master/advisories/asuswrt-lan-rce.txt
• https://raw.githubusercontent.com/pedrib/PoC/master/exploits/metasploit/asuswrt_lan_rce.rb
• https://www.exploit-db.com/exploits/43881/
• https://www.exploit-db.com/exploits/44176/

Github

No PoCs found on GitHub currently.