medium6.3
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authent…
Impact
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Rt-Ac66u Firmware | Versions 3.0.0.4.140, 3.0.0.4.220, 3.0.0.4.246, 3.0.0.4.260, 3.0.0.4.270, 3.0.0.4.354 |
| Asus | Rt-Ac68u Firmware | Versions 3.0.0.4.374.4755, 3.0.0.4.374_4561, 3.0.0.4.374_4887 |
| Asus | Rt-N10e Firmware | Versions 2.0.0.7, 2.0.0.10, 2.0.0.16, 2.0.0.19, 2.0.0.20, 2.0.0.24 |
| Asus | Rt-N14u Firmware | Versions 3.0.0.4.322, 3.0.0.4.356 |
| Asus | Rt-N16 Firmware | Versions 1.0.1.9, 1.0.2.3, 3.0.0.3.108, 3.0.0.3.162, 3.0.0.3.178, 3.0.0.4.220 |
| Asus | Rt-N56u Firmware | Versions 1.0.1.4, 1.0.1.4o, 1.0.1.7c, 1.0.1.7f, 1.0.1.8j, 1.0.1.8l |
| Asus | Rt-N65u Firmware | Versions 3.0.0.3.134, 3.0.0.3.176, 3.0.0.4.260, 3.0.0.4.334, 3.0.0.4.342, 3.0.0.4.346 |
| Asus | Rt-N66u Firmware | Versions 3.0.0.4.272, 3.0.0.4.370 |
| Asus | Rt-Ac68u | All versions |
| T-Mobile | Tm-Ac1900 | Version 3.0.0.4.376_3169 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Apr/225
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Apr/225
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994