AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-20577

CRITICAL · CVSS 9.1 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-20577
Severity
CRITICAL
CVSS
9.1
EPSS
0.58%

Original NVD Description

Orange Livebox 00.96.320S devices allow cgi-bin/restore.exe, cgi-bin/firewall_SPI.exe, cgi-bin/setup_remote_mgmt.exe, cgi-bin/setup_pass.exe, and cgi-bin/upgradep.exe CSRF. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.