CVE-2018-6000

This Metasploit module exploits CVE-2018-6000 in AsusWRT routers by setting the `ateCommand_flag` via a POST request to `/vpnupload.cgi` and then sending a UDP packet to port 9999 to execute arbitrary commands as root. It starts a telnetd service on a random port for interactive shell access.

This is a detailed writeup describing two vulnerabilities (CVE-2018-5999 and CVE-2018-6000) in AsusWRT routers, including an authentication bypass and unauthenticated NVRAM configuration manipulation leading to remote code execution. The document explains the technical details, exploitation steps, and references related tools like a Metasploit module.

This Metasploit module exploits an unauthenticated RCE vulnerability in AsusWRT by setting a NVRAM variable via HTTP POST and sending a crafted UDP packet to execute arbitrary commands as root. It spawns a telnetd service for interactive shell access.