PT-2014-4884
CVE-2014-2719
·
تاريخ النشر
2014-04-21
·
تاريخ التحديث
2016-06-30
الوصف من
CVSS 2.0
6.3
متوسطةالمقاييسAV:N/AC:M/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
ASUS RT series routers versions prior to 3.0.0.4.374.5517
Description
The issue allows remote authenticated users to obtain the administrator user name and password by reading the source code of the Advanced System Content.asp page when an administrator session is active.
Recommendations
For versions prior to 3.0.0.4.374.5517, update the firmware to version 3.0.0.4.374.5517 or later to resolve the issue. As a temporary workaround, consider restricting access to the Advanced System Content.asp page until the firmware is updated.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾