CVE-2014-2719 - CVE House
Back to Database
Status published Medium CVE-2014-2719

Advanced_System_Content.asp in the ASUS RT series routers with firmware before...

Vulnerability Description

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2719

Credits & Attribution

No credits recorded in the NVD database.

References

More from asus

View All →
CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does...
Unknown 0
CVE-2022-42455
ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by...
Unknown 0
CVE-2022-36439
AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers...
Unknown 0
CVE-2022-36438
AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file...
Unknown 0
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready...
High 7.8

Affected Vendor

Affected Software

rt-ac66u firmware, rt-ac68u firmware, rt-n10e firmware, rt-n14u firmware, rt-n16 firmware, rt-n56u firmware, rt-n65u firmware, rt-n66u firmware, rt-ac68u, tm-ac1900
Vulnerable Versions:
3.0.0.4.140, 3.0.0.4.220, 3.0.0.4.246, 3.0.0.4.260, 3.0.0.4.270, 3.0.0.4.354, 3.0.0.4.374.4755, 3.0.0.4.374_4561, 3.0.0.4.374_4887, 2.0.0.7, 2.0.0.10, 2.0.0.16, 2.0.0.19, 2.0.0.20, 2.0.0.24, 2.0.0.25, 3.0.0.4.322, 3.0.0.4.356, 1.0.1.9, 1.0.2.3, 3.0.0.3.108, 3.0.0.3.162, 3.0.0.3.178, 7.0.2.38b, 1.0.1.4, 1.0.1.4o, 1.0.1.7c, 1.0.1.7f, 1.0.1.8j, 1.0.1.8l, 1.0.1.8n, 3.0.0.4.318, 3.0.0.4.334, 3.0.0.4.342, 3.0.0.4.360, 7.0.1.21, 7.0.1.32, 8.1.1.4, 3.0.0.3.134, 3.0.0.3.176, 3.0.0.4.346, 3.0.0.4.272, 3.0.0.4.370, 3.0.0.4.376_3169

Timeline

Official Publish: April 21st, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.