製品・ソフトウェアに関する情報
Vulnerability Search
複数の ASUS 製品における OS コマンドインジェクションの脆弱性
Title 複数の ASUS 製品における OS コマンドインジェクションの脆弱性
Summary

複数の ASUS 製品には、OS コマンドインジェクションの脆弱性が存在します。

Possible impacts 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution

ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date Jan. 2, 2018, midnight
Registration Date June 18, 2018, 5:04 p.m.
Last Update June 18, 2018, 5:04 p.m.
CVSS3.0 : 緊急
Score 9.8
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS2.0 : 危険
Score 10
Vector AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected System
ASUSTeK Computer Inc.
RT-AC1900 ファームウェア 
RT-AC2900 ファームウェア 
RT-AC3100 ファームウェア 
RT-AC3200 ファームウェア 
RT-AC5300 ファームウェア 
RT-AC66U ファームウェア 
RT-AC68U ファームウェア 
RT-AC86U ファームウェア 
RT-AC87U ファームウェア 
RT-AC88U ファームウェア 
RT-N18U ファームウェア 
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
その他
Change Log
No Changed Details Date of change
1 [2018年06月18日]
  掲載		 June 18, 2018, 5:04 p.m.
NVD Vulnerability Information
CVE-2018-9285
Summary

Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices before 3.0.0.4.382.39935; RT-AC87U and RT-AC3200 devices before 3.0.0.4.382.50010; and RT-AC5300 devices before 3.0.0.4.384.20287 allows OS command injection via the pingCNT and destIP fields of the SystemCmd variable.

Publication Date April 5, 2018, 4:29 a.m.
Registration Date March 1, 2021, 7:44 p.m.
Last Update Nov. 21, 2024, 1:15 p.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:asus:rt-ac66u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:asus:rt-ac86u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:asus:rt-ac88u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:asus:rt-ac1900_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac1900:-:*:*:*:*:*:*:*
Configuration6 or higher or less more than less than
cpe:2.3:o:asus:rt-ac2900_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac2900:-:*:*:*:*:*:*:*
Configuration7 or higher or less more than less than
cpe:2.3:o:asus:rt-ac3100_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.10007
execution environment
1 cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:*
Configuration8 or higher or less more than less than
cpe:2.3:o:asus:rt-n18u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.382.39935
execution environment
1 cpe:2.3:h:asus:rt-n18u:-:*:*:*:*:*:*:*
Configuration9 or higher or less more than less than
cpe:2.3:o:asus:rt-ac87u_firmware:*:*:*:*:*:*:*:* 3.0.0.4.382.50010
execution environment
1 cpe:2.3:h:asus:rt-ac87u:-:*:*:*:*:*:*:*
Configuration10 or higher or less more than less than
cpe:2.3:o:asus:rt-ac3200_firmware:*:*:*:*:*:*:*:* 3.0.0.4.382.50010
execution environment
1 cpe:2.3:h:asus:rt-ac3200:-:*:*:*:*:*:*:*
Configuration11 or higher or less more than less than
cpe:2.3:o:asus:rt-ac5300_firmware:*:*:*:*:*:*:*:* 3.0.0.4.384.20287
execution environment
1 cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List