What’s Vulnerable › Vulnerabilities

CVE-2014-2719

• Severity: medium (CVSS 6.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-22 · updated 2026-06-17
• Weakness: CWE-200

Description

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.

Affected products

• ASUS Rt-Ac66U Firmware: 3.0.0.4.140, 3.0.0.4.220, 3.0.0.4.246, 3.0.0.4.260, 3.0.0.4.270, 3.0.0.4.354
• ASUS RT-AC68U: all versions
• ASUS Japan Inc. RT-AC68U: 3.0.0.4.374.4755, 3.0.0.4.374_4561, 3.0.0.4.374_4887
• ASUS Rt-N10E Firmware: 2.0.0.7, 2.0.0.10, 2.0.0.16, 2.0.0.19, 2.0.0.20, 2.0.0.24 (+1)
• ASUS Rt-N14U Firmware: 3.0.0.4.322, 3.0.0.4.356
• ASUS Rt-N16 Firmware: 1.0.1.9, 1.0.2.3, 3.0.0.3.108, 3.0.0.3.162, 3.0.0.3.178, 3.0.0.4.220 (+4)
• ASUS Rt-N56U Firmware: 1.0.1.4, 1.0.1.4o, 1.0.1.7c, 1.0.1.7f, 1.0.1.8j, 1.0.1.8l (+8)
• ASUS Rt-N65U Firmware: 3.0.0.3.134, 3.0.0.3.176, 3.0.0.4.260, 3.0.0.4.334, 3.0.0.4.342, 3.0.0.4.346
• ASUS Rt-N66U Firmware: 3.0.0.4.272, 3.0.0.4.370
• T-Mobile Tm-Ac1900: 3.0.0.4.376_3169

References

• http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
• http://seclists.org/fulldisclosure/2014/Apr/225
• http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
• https://support.t-mobile.com/docs/DOC-21994
• http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html
• http://seclists.org/fulldisclosure/2014/Apr/225
• http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
• https://support.t-mobile.com/docs/DOC-21994

Get alerted when CVE-2014-2719 or the next vulnerability affects your stack