VulnerabilityModified
CVE-2014-2719
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
MEDIUM 6.3EPSS 1.13%
Does this matter?
Lower severity and a low EPSS score (1.13%). Track it; it rarely justifies an emergency change on its own.
Description
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
- CVSS 2.0
- 6.3 MEDIUMAV:N/AC:M/Au:S/C:C/I:N/A:N
- EPSS
- 1.13% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- asus/rt-ac66u firmware · asus/rt-ac68u firmware · asus/rt-n10e firmware · asus/rt-n14u firmware · asus/rt-n16 firmware · asus/rt-n56u firmware · asus/rt-n65u firmware · asus/rt-n66u firmware · asus/rt-ac68u · t-mobile/tm-ac1900
- Source
- cve@mitre.org
References
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Apr/225
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994
- http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
- http://seclists.org/fulldisclosure/2014/Apr/225
- http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
- https://support.t-mobile.com/docs/DOC-21994
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.