Lucene search

[email protected]CVE-2018-18319

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2018-18319

2022-10-0316:22:04

CWE-94

[email protected]

web.nvd.nist.gov

cve-2018-18319

merlin.php

asuswrt-merlin

security

vulnerability

remote code execution

nvd

api security

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc=‘ls’ URI. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution

Affected configurations

NVD

Node

asuswrt-merlin_projectrt-ac5300_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac5300Match-

Node

asuswrt-merlin_projectrt_ac1900p_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt_ac1900p_Match-

Node

asuswrt-merlin_projectrt-ac68u_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac68uMatch-

Node

asuswrt-merlin_projectrt-ac68p_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac68pMatch-

Node

asuswrt-merlin_projectrt-ac88u_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac88uMatch-

Node

asuswrt-merlin_projectrt-ac66u_b1_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac66u_b1Match-

Node

asuswrt-merlin_projectrt-ac56u_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac56uMatch-

Node

asuswrt-merlin_projectrt-ac3200_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac3200Match-

Node

asuswrt-merlin_projectrt-ac68uf_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac68ufMatch-

Node

asuswrt-merlin_projectrt-ac87_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac87Match-

Node

asuswrt-merlin_projectrt-ac3100_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac3100Match-

Node

asuswrt-merlin_projectrt-ac1900_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac1900Match-

Node

asuswrt-merlin_projectrt-ac86u_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac86uMatch-

Node

asuswrt-merlin_projectrt-ac2900_firmwareRange≤380.70

AND

asuswrt-merlin_projectrt-ac2900Match-

CPENameOperatorVersion
asuswrt-merlin_project:rt-ac5300_firmwareasuswrt-merlin project rt-ac5300 firmwarele380.70

CPE	Name	Operator	Version
asuswrt-merlin_project:rt-ac5300_firmware	asuswrt-merlin project rt-ac5300 firmware	le	380.70

References

blog.51cto.com/010bjsoft/2298902

github.com/qoli/Merlin.PHP/issues/27

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON

Related for CVE-2018-18319

nvd1 prion1 cvelist1