What is CVE-2018-8878?

CVE-2018-8878 is a medium-severity vulnerability in Asus Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-27.

How severe is CVE-2018-8878?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Asus Firmware

CVE-2018-8878

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.

Vulnerability class: Information Disclosure

EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Asus Asus_firmware
Asuswrt-merlin
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-8878?: CVE-2018-8878 is a medium-severity vulnerability in Asus Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2020-02-27.
How severe is CVE-2018-8878?: Medium severity. CVSS v3 base score is 5.3 out of 10.