Record summary

CVE-2018-14714 has a selected CVSS score of 9.8 (critical); EIP currently links 4 repository PoCs.

Description

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
4

Proofs of concept

4

Repository PoCs

GitHubtin-z/CVE-2018-14714-POCRepository PoCby tin-zStars: 6Not analyzed1 file

148 B

GitHub

PoC details
GitHubsunn1day/CVE-2018-14714-POCRepository PoCby sunn1dayStars: 9Not analyzed2 files

4.7 KiB

GitHub

PoC details
GitHubBTtea/CVE-2018-14714-RCE-exploitRepository PoCby BTteaStars: 19Not analyzed11 files

2.9 MiB

GitHub

PoC details
GitHubBreadSquad/TimeInjectorRepository PoCby BreadSquadStars: 0Not analyzed2 files

7.7 KiB

GitHub

PoC details

References

2