high
7.8
CWE
20
Advisory Published
Updated

CVE-2018-20335: Input Validation

First published: Fri Mar 20 2020(Updated: )

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS of the httpd service via the /APP_Installation.asp?= URI.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Asuswrt-Merlin=3.0.0.4.384.20308
ASUS ROG Rapture GT-AC2900
ASUS ROG Rapture GT-AC5300
ASUS GT-AX11000 Firmware
ASUS RT-AC1200G
ASUS RT-AC1200 v2
ASUS RT-AC1200G Firmware
ASUS RT-AC1200GE
ASUS RT-AC1750 B1 Firmware
ASUS RT-AC1750
ASUS RT-AC1900P Firmware
ASUS RT-AC3100
ASUS routers
ASUS RT-AC51U firmware
ASUS RT-AC5300 firmware
ASUS RT-AC55U
ASUS RT-AC56R Firmware
ASUS RT-AC56S
ASUS RT-AC56U Firmware
ASUS rt-ac66r firmware
ASUS RT-AC66U firmware
ASUS RT-AC66U B1
ASUS RT-AC66U firmware
ASUS RT-AC68P Firmware
ASUS 4G-AC68U
ASUS RT-AC86U firmware
ASUS RT-AC87U Firmware
ASUS RT-AC88U Firmware
ASUS RT-ACRH12
ASUS RT-ACRH13 firmware
ASUS routers
ASUS RT-AX56U firmware
ASUS RT-AX58U Firmware
ASUS RT-AX88U Firmware
ASUS RT-AX92U Firmware
Asus Rt-g32 Firmware
Asus RT-N10+ D1 firmware
ASUS routers
ASUS RT-N14U firmware
ASUS RT-N16 firmware
ASUS Router
ASUS RT-N56R
ASUS routers
ASUS RT-N600 firmware
ASUS RT-N65U Firmware
ASUS RT-N66R
Asus EA-N66

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the vulnerability ID?

    The vulnerability ID is CVE-2018-20335.

  • What is the severity of CVE-2018-20335?

    The severity of CVE-2018-20335 is high, with a severity value of 7.5.

  • What does CVE-2018-20335 affect?

    CVE-2018-20335 affects ASUSWRT version 3.0.0.4.384.20308.

  • What is the impact of CVE-2018-20335?

    CVE-2018-20335 allows an unauthenticated user to trigger a Denial of Service (DoS) attack on the httpd service.

  • Is there a fix for CVE-2018-20335?

    The fix for CVE-2018-20335 may be provided by ASUS in a software update. It is recommended to check for updates from ASUS and apply them accordingly.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203