CVE-2014-2719

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.

Score

CVSS 2.0 6.3 Medium

Status

Modified - cve@mitre.org

Published

2014-04-22

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Rt-ac66u Firmware (Asus)
• Rt-ac68u (Asus)
• Rt-ac68u Firmware (Asus)
• Rt-n10e Firmware (Asus)
• Rt-n14u Firmware (Asus)
• Rt-n16 Firmware (Asus)
• Rt-n56u Firmware (Asus)
• Rt-n65u Firmware (Asus)
• Rt-n66u Firmware (Asus)
• Tm-ac1900 (T-mobile)

References

• http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
• http://seclists.org/fulldisclosure/2014/Apr/225
• http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
• https://support.t-mobile.com/docs/DOC-21994