Remote code execution

2018-10-1506:29:00

PRIOn knowledge base

www.prio-n.com

9.9 High

AI Score

Confidence

High

0.088 Low

EPSS

Percentile

94.6%

JSON

DISPUTED An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc=‘ls’ URI. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution.

CPENameOperatorVersion
rt-ac1900_firmwarele380.70
rt-ac2900_firmwarele380.70
rt-ac3100_firmwarele380.70
rt-ac3200_firmwarele380.70
rt-ac5300_firmwarele380.70
rt-ac56u_firmwarele380.70
rt-ac66u_b1_firmwarele380.70
rt-ac68p_firmwarele380.70
rt-ac68u_firmwarele380.70
rt-ac68uf_firmwarele380.70

Name	Operator	Version
rt-ac1900_firmware	le	380.70
rt-ac2900_firmware	le	380.70
rt-ac3100_firmware	le	380.70
rt-ac3200_firmware	le	380.70
rt-ac5300_firmware	le	380.70
rt-ac56u_firmware	le	380.70
rt-ac66u_b1_firmware	le	380.70
rt-ac68p_firmware	le	380.70
rt-ac68u_firmware	le	380.70
rt-ac68uf_firmware	le	380.70