Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

ASUS RT-AC3200 firmware lets attackers read memory

CVE-2018-14713 · published 7 years ago
Summary

The RT-AC3200 router firmware (version 3.0.0.4.382.50010) contains a flaw that lets a remote user craft a special URL to view parts of the router’s memory and CPU registers. This could expose sensitive configuration data or credentials. Install the latest firmware update from ASUS as soon as possible to close the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
asus rt-ac3200_firmware 3.0.0.4.382.50010
cpe:2.3:o:asus:rt-ac3200_firmware:3.0.0.4.382.50010:*:*:*:*:*:*:*
Original advisory text
Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter.
Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU registers via the "hook" URL parameter.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.1 High
Exploitation
4% chance of attack within 30 days
Type
CWE-134Use of Externally-Controlled Format String
Timeline
Published13 May 2019
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-14713 · NVD
Track software like this
Free during beta