high
7.5
CWE
200
Advisory Published
Updated

CVE-2018-20333: Infoleak

First published: Fri Mar 20 2020(Updated: )

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /update_applist.asp to see if a USB device is attached to the router and if there are apps installed on the router.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Asuswrt-Merlin=3.0.0.4.384.20308
ASUS ROG Rapture GT-AC2900
ASUS ROG Rapture GT-AC5300
ASUS GT-AX11000 Firmware
ASUS RT-AC1200G
ASUS RT-AC1200 v2
ASUS RT-AC1200G Firmware
ASUS RT-AC1200GE
ASUS RT-AC1750 B1 Firmware
ASUS RT-AC1750
ASUS RT-AC1900P Firmware
ASUS RT-AC3100
ASUS routers
ASUS RT-AC51U firmware
ASUS RT-AC5300 firmware
ASUS RT-AC55U
ASUS RT-AC56R Firmware
ASUS RT-AC56S
ASUS RT-AC56U Firmware
ASUS rt-ac66r firmware
ASUS RT-AC66U firmware
ASUS RT-AC66U B1
ASUS RT-AC66U firmware
ASUS RT-AC68P Firmware
ASUS 4G-AC68U
ASUS RT-AC86U firmware
ASUS RT-AC87U Firmware
ASUS RT-AC88U Firmware
ASUS RT-ACRH12
ASUS RT-ACRH13 firmware
ASUS routers
ASUS RT-AX56U firmware
ASUS RT-AX58U Firmware
ASUS RT-AX88U Firmware
ASUS RT-AX92U Firmware
Asus Rt-g32 Firmware
Asus RT-N10+ D1 firmware
ASUS routers
ASUS RT-N14U firmware
ASUS RT-N16 firmware
ASUS Router
ASUS RT-N56R
ASUS routers
ASUS RT-N600 firmware
ASUS RT-N65U Firmware
ASUS RT-N66R
Asus EA-N66

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2018-20333?

    The severity of CVE-2018-20333 is high, with a severity value of 7.5.

  • How does CVE-2018-20333 affect ASUSWRT 3.0.0.4.384.20308?

    CVE-2018-20333 allows an unauthenticated user to determine if a USB device is attached to the router and if there are apps installed on the router.

  • Is ASUS GT-AC2900 vulnerable to CVE-2018-20333?

    No, ASUS GT-AC2900 is not vulnerable to CVE-2018-20333.

  • How can I fix CVE-2018-20333 in ASUSWRT 3.0.0.4.384.20308?

    To fix CVE-2018-20333, update ASUSWRT to a version that is not affected by the vulnerability.

  • Where can I find more information about CVE-2018-20333?

    You can find more information about CVE-2018-20333 at the following link: [https://starlabs.sg/advisories/18-20333/](https://starlabs.sg/advisories/18-20333/)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203