CVE-2018-5999

Critical · 9.8

CVSS

9.8

EPSS

87.6%

Published

Jan 22, 2018

CISA due date

—

The record

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. In the handle_request function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails.

Affected packages

Ecosystem	Package	Introduced	Fixed