An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution
| CVE | CVE-2018-18320 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 5.2% en 30 días (percentil 92) |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Productos afectados (catálogo NVD)
asuswrt-merlin_project/rt-ac1900asuswrt-merlin_project/rt-ac1900_firmwareasuswrt-merlin_project/rt-ac2900asuswrt-merlin_project/rt-ac2900_firmwareasuswrt-merlin_project/rt-ac3100asuswrt-merlin_project/rt-ac3100_firmwareasuswrt-merlin_project/rt-ac3200asuswrt-merlin_project/rt-ac3200_firmware