What is CVE-2018-8877?

CVE-2018-8877 is a medium-severity vulnerability in Asus Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-27.

How severe is CVE-2018-8877?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Asus Firmware

CVE-2018-8877

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.

Vulnerability class: Information Disclosure

EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Asus Asus_firmware
Asuswrt-merlin
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-8877?: CVE-2018-8877 is a medium-severity vulnerability in Asus Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-27.
How severe is CVE-2018-8877?: Medium severity. CVSS v3 base score is 5.3 out of 10.