Vulnerability Name:

CVE-2014-2719 (CCN-92773)

Assigned:2014-04-17
Published:2014-04-17
Updated:2016-06-30
Summary:Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.
CVSS v3 Severity:3.5 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): None
Availibility (A): None
CVSS v2 Severity:6.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N)
4.7 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): None
Availibility (A): None
4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
Vulnerability Type:CWE-200
Vulnerability Consequences:Obtain Information
References:Source: MITRE
Type: CNA
CVE-2014-2719

Source: MISC
Type: UNKNOWN
http://dnlongen.blogspot.com/2014/04/CVE-2014-2719-Asus-RT-Password-Disclosure.html

Source: FULLDISC
Type: UNKNOWN
20140416 ASUS RT-XXXX SOHO routers expose admin password, fixed in 3.0.0.4.374.5517

Source: CONFIRM
Type: UNKNOWN
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29

Source: CCN
Type: ASUS Web site
RT routers

Source: CCN
Type: BID-66954
ASUS RT-Series Wireless Routers 'Advanced_System_Content.asp' Information Disclosure Vulnerability

Source: XF
Type: UNKNOWN
asusrt-cve20142719-info-disc(92773)

Source: CCN
Type: Packet Storm Security [04-17-2014]
ASUS RT Password Disclosure

Source: CONFIRM
Type: UNKNOWN
https://support.t-mobile.com/docs/DOC-21994

Vulnerable Configuration:Configuration 1:
  • cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.140:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.220:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.246:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.270:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.354:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac68u_firmware:3.0.0.4.374_4561:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac68u_firmware:3.0.0.4.374_4887:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.7:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.10:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.16:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.19:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.20:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.24:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.25:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n14u_firmware:3.0.0.4.322:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n14u_firmware:3.0.0.4.356:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:1.0.1.9:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:1.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.108:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.162:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.178:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.220:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.246:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.354:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:7.0.2.38b:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.4o:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.7c:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.7f:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8j:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8l:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8n:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.318:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.334:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.342:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.360:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:7.0.1.21:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:7.0.1.32:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:8.1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.3.134:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.3.176:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.334:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.342:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.346:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n66u_firmware:3.0.0.4.272:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n66u_firmware:3.0.0.4.370:*:*:*:*:*:*:*
  • AND
  • cpe:/h:asus:rt-ac68u:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.270:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.246:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.220:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.140:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n66u_firmware:3.0.0.4.272:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n66u_firmware:3.0.0.4.370:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.342:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.334:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.3.176:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.3.134:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n65u_firmware:3.0.0.4.346:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n14u_firmware:3.0.0.4.322:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n14u_firmware:3.0.0.4.356:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.260:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.246:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.220:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.178:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.162:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.3.108:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:7.0.2.38b:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:1.0.2.3:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:1.0.1.9:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n16_firmware:3.0.0.4.354:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.342:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.334:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.318:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8n:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8l:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.8j:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.7f:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.7c:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:8.1.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:1.0.1.4o:*:*:*:*:*:*:*
  • OR cpe:/a:asus:rt-n56u_firmware:1.0.1.4:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:7.0.1.32:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:7.0.1.21:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n56u_firmware:3.0.0.4.360:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac66u_firmware:3.0.0.4.354:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.10:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.16:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.19:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.20:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.24:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.25:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-n10e_firmware:2.0.0.7:*:*:*:*:*:*:*
  • OR cpe:/o:asus:rt-ac68u_firmware:3.0.0.4.374.4755:*:*:*:*:*:*:*
  • OR cpe:/h:asus:rt-ac68u:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    asus rt-ac66u firmware 3.0.0.4.140
    asus rt-ac66u firmware 3.0.0.4.220
    asus rt-ac66u firmware 3.0.0.4.246
    asus rt-ac66u firmware 3.0.0.4.260
    asus rt-ac66u firmware 3.0.0.4.270
    asus rt-ac66u firmware 3.0.0.4.354
    asus rt-ac68u firmware 3.0.0.4.374.4755
    asus rt-ac68u firmware 3.0.0.4.374_4561
    asus rt-ac68u firmware 3.0.0.4.374_4887
    asus rt-n10e firmware 2.0.0.7
    asus rt-n10e firmware 2.0.0.10
    asus rt-n10e firmware 2.0.0.16
    asus rt-n10e firmware 2.0.0.19
    asus rt-n10e firmware 2.0.0.20
    asus rt-n10e firmware 2.0.0.24
    asus rt-n10e firmware 2.0.0.25
    asus rt-n14u firmware 3.0.0.4.322
    asus rt-n14u firmware 3.0.0.4.356
    asus rt-n16 firmware 1.0.1.9
    asus rt-n16 firmware 1.0.2.3
    asus rt-n16 firmware 3.0.0.3.108
    asus rt-n16 firmware 3.0.0.3.162
    asus rt-n16 firmware 3.0.0.3.178
    asus rt-n16 firmware 3.0.0.4.220
    asus rt-n16 firmware 3.0.0.4.246
    asus rt-n16 firmware 3.0.0.4.260
    asus rt-n16 firmware 3.0.0.4.354
    asus rt-n16 firmware 7.0.2.38b
    asus rt-n56u firmware 1.0.1.4
    asus rt-n56u firmware 1.0.1.4o
    asus rt-n56u firmware 1.0.1.7c
    asus rt-n56u firmware 1.0.1.7f
    asus rt-n56u firmware 1.0.1.8j
    asus rt-n56u firmware 1.0.1.8l
    asus rt-n56u firmware 1.0.1.8n
    asus rt-n56u firmware 3.0.0.4.318
    asus rt-n56u firmware 3.0.0.4.334
    asus rt-n56u firmware 3.0.0.4.342
    asus rt-n56u firmware 3.0.0.4.360
    asus rt-n56u firmware 7.0.1.21
    asus rt-n56u firmware 7.0.1.32
    asus rt-n56u firmware 8.1.1.4
    asus rt-n65u firmware 3.0.0.3.134
    asus rt-n65u firmware 3.0.0.3.176
    asus rt-n65u firmware 3.0.0.4.260
    asus rt-n65u firmware 3.0.0.4.334
    asus rt-n65u firmware 3.0.0.4.342
    asus rt-n65u firmware 3.0.0.4.346
    asus rt-n66u firmware 3.0.0.4.272
    asus rt-n66u firmware 3.0.0.4.370
    asus rt-ac68u -
    t-mobile tm-ac1900 3.0.0.4.376_3169
    asus rt-ac66u firmware 3.0.0.4.270
    asus rt-ac66u firmware 3.0.0.4.260
    asus rt-ac66u firmware 3.0.0.4.246
    asus rt-ac66u firmware 3.0.0.4.220
    asus rt-ac66u firmware 3.0.0.4.140
    asus rt-n66u firmware 3.0.0.4.272
    asus rt-n66u firmware 3.0.0.4.370
    asus rt-n65u firmware 3.0.0.4.342
    asus rt-n65u firmware 3.0.0.4.334
    asus rt-n65u firmware 3.0.0.4.260
    asus rt-n65u firmware 3.0.0.3.176
    asus rt-n65u firmware 3.0.0.3.134
    asus rt-n65u firmware 3.0.0.4.346
    asus rt-n14u firmware 3.0.0.4.322
    asus rt-n14u firmware 3.0.0.4.356
    asus rt-n16 firmware 3.0.0.4.260
    asus rt-n16 firmware 3.0.0.4.246
    asus rt-n16 firmware 3.0.0.4.220
    asus rt-n16 firmware 3.0.0.3.178
    asus rt-n16 firmware 3.0.0.3.162
    asus rt-n16 firmware 3.0.0.3.108
    asus rt-n16 firmware 7.0.2.38b
    asus rt-n16 firmware 1.0.2.3
    asus rt-n16 firmware 1.0.1.9
    asus rt-n16 firmware 3.0.0.4.354
    asus rt-n56u firmware 3.0.0.4.342
    asus rt-n56u firmware 3.0.0.4.334
    asus rt-n56u firmware 3.0.0.4.318
    asus rt-n56u firmware 1.0.1.8n
    asus rt-n56u firmware 1.0.1.8l
    asus rt-n56u firmware 1.0.1.8j
    asus rt-n56u firmware 1.0.1.7f
    asus rt-n56u firmware 1.0.1.7c
    asus rt-n56u firmware 8.1.1.4
    asus rt-n56u firmware 1.0.1.4o
    asus rt-n56u firmware 1.0.1.4
    asus rt-n56u firmware 7.0.1.32
    asus rt-n56u firmware 7.0.1.21
    asus rt-n56u firmware 3.0.0.4.360
    asus rt-ac66u firmware 3.0.0.4.354
    asus rt-n10e firmware 2.0.0.10
    asus rt-n10e firmware 2.0.0.16
    asus rt-n10e firmware 2.0.0.19
    asus rt-n10e firmware 2.0.0.20
    asus rt-n10e firmware 2.0.0.24
    asus rt-n10e firmware 2.0.0.25
    asus rt-n10e firmware 2.0.0.7
    asus rt-ac68u firmware 3.0.0.4.374.4755
    asus rt-ac68u -