CVE-2014-2718 - CVE House
Back to Database
Status published High CVE-2014-2718

ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U,...

Vulnerability Description

ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware (1) update information or (2) downloaded updates, which allows man-in-the-middle (MITM) attackers to execute arbitrary code via a crafted image.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2718

Credits & Attribution

No credits recorded in the NVD database.

References

More from t-mobile

View All →
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and...
Critical 10
CVE-2014-6733
The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does...
Medium 5.4
CVE-2014-2925
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and...
Medium 4.3
CVE-2013-5948
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and...
High 8.5
CVE-2011-2716
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote...
Medium 6.8

Affected Vendor

Affected Software

tm-ac1900, rt series firmware
Vulnerable Versions:
3.0.0.4.376_3169, 0

Timeline

Official Publish: November 4th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.