CVE-2014-2719
No CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- asus:rt-ac66u_firmware
- asus:rt-ac68u
- asus:rt-ac68u_firmware
- asus:rt-n10e_firmware
- asus:rt-n14u_firmware
- asus:rt-n16_firmware
- asus:rt-n56u_firmware
- asus:rt-n65u_firmware
- asus:rt-n66u_firmware
- t-mobile:tm-ac1900
References
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Apr/225
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html