CVE-2018-18287

PoC —

CVSS 3.0

5.3 medium

EPSS

2%p76

Published

Oct 14, 2018 (Oct 14, 2018)

Modified

Jun 17, 2026

Description

On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source code of the Main_Login.asp page.

Vendors: asus
Products: rt-ac58u firmware
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.