blog.securityevaluators.com
https://blog.securityevaluators.com/asus-routers-overflow-with-vulnerabilities-b111bc1c8eb8 CVE-2018-14714
CRITICAL
Record summary
CVE-2018-14714 has a selected CVSS score of 9.8 (critical); EIP currently links 4 repository PoCs.
Description
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 4
Proofs of concept
4Repository PoCs
GitHubtin-z/CVE-2018-14714-POCRepository PoCby tin-zStars: 6Not analyzed1 file
GitHubsunn1day/CVE-2018-14714-POCRepository PoCby sunn1dayStars: 9Not analyzed2 files
GitHubBTtea/CVE-2018-14714-RCE-exploitRepository PoCby BTteaStars: 19Not analyzed11 files
GitHubBreadSquad/TimeInjectorRepository PoCby BreadSquadStars: 0Not analyzed2 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-14714