Unscored severity · published Apr 22, 2014
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rt-ac66u Firmware · Asus
3.0.0.4.140; 3.0.0.4.220; 3.0.0.4.246; 3.0.0.4.260; 3.0.0.4.270; 3.0.0.4.354 · source: NVD
RT
Rt-ac68u · Asus
All versions, or not specified · source: NVD
RF
Rt-ac68u Firmware · Asus
3.0.0.4.374.4755; 3.0.0.4.374_4561; 3.0.0.4.374_4887 · source: NVD
RF
Rt-n10e Firmware · Asus
2.0.0.7; 2.0.0.10; 2.0.0.16; 2.0.0.19; 2.0.0.20; 2.0.0.24; +1 more · source: NVD
RF
Rt-n14u Firmware · Asus
3.0.0.4.322; 3.0.0.4.356 · source: NVD
RF
Rt-n16 Firmware · Asus
1.0.1.9; 1.0.2.3; 3.0.0.3.108; 3.0.0.3.162; 3.0.0.3.178; 3.0.0.4.220; +4 more · source: NVD
RF
Rt-n56u Firmware · Asus
1.0.1.4; 1.0.1.4o; 1.0.1.7c; 1.0.1.7f; 1.0.1.8j; 1.0.1.8l; +8 more · source: NVD
RF
Rt-n65u Firmware · Asus
3.0.0.3.134; 3.0.0.3.176; 3.0.0.4.260; 3.0.0.4.334; 3.0.0.4.342; 3.0.0.4.346 · source: NVD
RF
Rt-n66u Firmware · Asus
3.0.0.4.272; 3.0.0.4.370 · source: NVD
TM
Tm-ac1900 · T-mobile
3.0.0.4.376_3169 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2719
dnlongen.blogspot.com
http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
seclists.org
http://seclists.org/fulldisclosure/2014/Apr/225
support.asus.com
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
support.t-mobile.com
https://support.t-mobile.com/docs/DOC-21994
More from Rt-ac66u Firmware
9.8
CVE-2018-8879
Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute…
9.8
CVE-2013-4656
Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service
9.8
CVE-2018-8826
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; RT-AC52U B1, RT-AC1200 and RT-N600 routers with firmware…
9.8
CVE-2018-9285
Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC3100 devices before 3.0.0.4.384_10007; RT-N18U devices…
9.8
CVE-2013-4659
Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916