CVE:CVE-2018-18319
CNNVD:CNNVD-201810-690
Asuswrt-Merlin是华硕（ASUS）公司的一款运行在其路由器中的固件。Merlin.PHP是其中的一个基于Web的管理面板组件。
Asuswrt-Merlin Merlin.PHP组件0.6.6版本中存在安全漏洞。远程攻击者可利用该漏洞执行任意命令。
solution:Upgrade asuswrt-merlin_project rt-ac5300_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt_ac1900p_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac68u_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac68p_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac88u_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac66u_b1_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac56u_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac3200_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac68uf_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac87_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac3100_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac1900_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac86u_firmware to a higher version than 380.70,and avoid the version (,380.70]; Upgrade asuswrt-merlin_project rt-ac2900_firmware to a higher version than 380.70,and avoid the version (,380.70]