Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "RT-AC58U Firmware",
          "vendor": "ASUS",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c=3.0.0.4.380_6516"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Adrian \"syrex1013\" Dacka"
        }
      ],
      "datePublic": "2018-10-14",
      "descriptions": [
        {
          "lang": "en",
          "value": "CVE-2018-18287 is an information disclosure vulnerability that affects ASUS routers running specific firmware versions. The vulnerability exists in the router\u0027s web interface and allows unauthorized access to sensitive network data.\n\nTechnical details:\nThe vulnerability is present in the main login page (Main_Login.asp) and additional pages of the router\u0027s web interface. These pages inadvertently expose:\n\nDHCP Lease Information: Complete list of devices connected to the network, including IP addresses and hostnames\nNetwork Time Information: Current time, date, and system uptime statistics\nNetwork Topology: Details about active network clients\nThis information is accessible without authentication, allowing any user with network access to the router\u0027s web interface to extract sensitive data about the network and connected devices."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "DHCP Leak Extraction:\n\nSends an HTTP GET request to http://[router-ip]/Main_Login.asp\nParses the JavaScript variable dhcpLeaseInfo from the response\nExtracts and formats the list of connected devices with their IP addresses and hostnames\nTime Information Extraction:\n\nSends an HTTP GET request to http://[router-ip]/update_clients.asp\nExtracts the current_time value from the response\nDisplays the router\u0027s current time, date, and uptime information\nBoth requests are made without any authentication, demonstrating the severity of the vulnerability."
        }
      ],
      "references": [
        {
          "url": "https://github.com/remix30303/AsusLeak"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "ASUS RT-AC58U Information Disclosure",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [
            {
              "destId": "CVE-2018-18287",
              "type": "equal"
            }
          ],
          "vulnId": "GCVE-115-2026-00004"
        }
      ]
    }
  },
  "cveMetadata": {
    "cveId": "CVE-2018-18287",
    "datePublished": "2026-09-16T00:00:00.000Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-115-2026-00004"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}