6.3

CVE-2014-2719

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.140
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.220
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.246
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.260
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.270
Asus ≫ Rt-ac66u Firmware Version 3.0.0.4.354
Asus ≫ Rt-ac68u Firmware Version 3.0.0.4.374.4755
Asus ≫ Rt-ac68u Firmware Version 3.0.0.4.374_4561
Asus ≫ Rt-ac68u Firmware Version 3.0.0.4.374_4887
Asus ≫ Rt-n10e Firmware Version 2.0.0.7
Asus ≫ Rt-n10e Firmware Version 2.0.0.10
Asus ≫ Rt-n10e Firmware Version 2.0.0.16
Asus ≫ Rt-n10e Firmware Version 2.0.0.19
Asus ≫ Rt-n10e Firmware Version 2.0.0.20
Asus ≫ Rt-n10e Firmware Version 2.0.0.24
Asus ≫ Rt-n10e Firmware Version 2.0.0.25
Asus ≫ Rt-n14u Firmware Version 3.0.0.4.322
Asus ≫ Rt-n14u Firmware Version 3.0.0.4.356
Asus ≫ Rt-n16 Firmware Version 1.0.1.9
Asus ≫ Rt-n16 Firmware Version 1.0.2.3
Asus ≫ Rt-n16 Firmware Version 3.0.0.3.108
Asus ≫ Rt-n16 Firmware Version 3.0.0.3.162
Asus ≫ Rt-n16 Firmware Version 3.0.0.3.178
Asus ≫ Rt-n16 Firmware Version 3.0.0.4.220
Asus ≫ Rt-n16 Firmware Version 3.0.0.4.246
Asus ≫ Rt-n16 Firmware Version 3.0.0.4.260
Asus ≫ Rt-n16 Firmware Version 3.0.0.4.354
Asus ≫ Rt-n16 Firmware Version 7.0.2.38b
Asus ≫ Rt-n56u Firmware Version 1.0.1.4
Asus ≫ Rt-n56u Firmware Version 1.0.1.4o
Asus ≫ Rt-n56u Firmware Version 1.0.1.7c
Asus ≫ Rt-n56u Firmware Version 1.0.1.7f
Asus ≫ Rt-n56u Firmware Version 1.0.1.8j
Asus ≫ Rt-n56u Firmware Version 1.0.1.8l
Asus ≫ Rt-n56u Firmware Version 1.0.1.8n
Asus ≫ Rt-n56u Firmware Version 3.0.0.4.318
Asus ≫ Rt-n56u Firmware Version 3.0.0.4.334
Asus ≫ Rt-n56u Firmware Version 3.0.0.4.342
Asus ≫ Rt-n56u Firmware Version 3.0.0.4.360
Asus ≫ Rt-n56u Firmware Version 7.0.1.21
Asus ≫ Rt-n56u Firmware Version 7.0.1.32
Asus ≫ Rt-n56u Firmware Version 8.1.1.4
Asus ≫ Rt-n65u Firmware Version 3.0.0.3.134
Asus ≫ Rt-n65u Firmware Version 3.0.0.3.176
Asus ≫ Rt-n65u Firmware Version 3.0.0.4.260
Asus ≫ Rt-n65u Firmware Version 3.0.0.4.334
Asus ≫ Rt-n65u Firmware Version 3.0.0.4.342
Asus ≫ Rt-n65u Firmware Version 3.0.0.4.346
Asus ≫ Rt-n66u Firmware Version 3.0.0.4.272
Asus ≫ Rt-n66u Firmware Version 3.0.0.4.370
Asus ≫ Rt-ac68u Version -
T-mobile ≫ Tm-ac1900 Version 3.0.0.4.376_3169
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.13% 0.621
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.3 6.8 6.9
AV:N/AC:M/Au:S/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://support.t-mobile.com/docs/DOC-21994
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
http://seclists.org/fulldisclosure/2014/Apr/225