CVE-2014-2719

MEDIUM · 6.3 CVSS Gepubliceerd: 22-04-2014 CWE-200

Beschrijving

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.

Vendors

Asus T-mobile

Affected products

Rt-ac66u Firmware Rt-ac68u Firmware Rt-n10e Firmware Rt-n14u Firmware Rt-n16 Firmware Rt-n56u Firmware Rt-n65u Firmware Rt-n66u Firmware Rt-ac68u Tm-ac1900

References

dnlongen.blogspot.com
seclists.org
support.asus.com
support.t-mobile.com