An issue was discovered in ASUSWRT 3.0.0.4.384.20308.
Priority MEDIUM 49CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST data, there is a command injection issue via shell metacharacters in the fb_email parameter. By using this issue, an attacker can control the router and get shell.
Why it matters now
EPSS 0.03773 89th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 47
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:asuswrt:3.0.0.4.384.20308:*:*:*:*:*:*:* | 3.0.0.4.384.20308 | Vulnerable | ASUS |
| cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:gt-ac5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:gt-ax11000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1200_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1200g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1200ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:asuswrt:3.0.0.4.384.20308:*:*:*:*:*:*:* Versions 3.0.0.4.384.20308 Vulnerable ·ASUS
- cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:gt-ac5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:gt-ax11000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1200_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1200g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1200ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1750:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 37 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac3200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac51u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac55u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac56r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac56s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac56u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac66r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac66u-b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-acrh12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-acrh13:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-ax92u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-g32:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n10\+d1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n10e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n14u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n19:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n56r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n65u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n66r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:h:asus:rt-n66u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac3200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac51u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac55u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac56r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac56s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac66r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac66u-b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-acrh12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-acrh13:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-ax92u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-g32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n10\+d1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n10e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n14u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n19:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n56r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n65u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n66r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:h:asus:rt-n66u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-20334
- 2026-10-03 Alias added: GHSA-xgrv-mpr3-8pg9
References
More Asuswrt vulnerabilities
- TI-2018-04367 An issue was discovered in AsusWRT before 3.0.0.4.384_10007. CVSS 3.0CRITICAL 9.8
- TI-2018-04368 An issue was discovered in AsusWRT before 3.0.0.4.384_10007. CVSS 3.0CRITICAL 9.8
- TI-2022-09749 Out-of-bounds write in Asuswrt-Merlin New Gen CVSS 3.1CRITICAL 9.8
- TI-2017-11446 Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt… CVSS 3.0CRITICAL 9.6
- TI-2017-11444 Improper administrator IP validation after his login in the HTTPd server in all current… CVSS 3.0HIGH 8.8
- TI-2017-11447 Password are stored in plaintext in nvram in the HTTPd server in all current versions (<=… CVSS 3.0HIGH 8.8
Sources
- CVE-2018-20334 · CVE Program
- CVE-2018-20334 · NVD
- FIRST EPSS
- GHSA-xgrv-mpr3-8pg9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences