CVE-2018-8877

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote…

published February 27, 2020

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01476 · 73.5th percentile
Published
2020-02-27T21:11Z
EPSS history
Timeline
  • 27 FEB 21:11Z
    Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote…
    cvelistv5