CVE-2014-2719

Name of the Vulnerable Software and Affected Versions ASUS RT series routers versions prior to 3.0.0.4.374.5517

Description The issue allows remote authenticated users to obtain the administrator user name and password by reading the source code of the Advanced System Content.asp page when an administrator session is active.

Recommendations For versions prior to 3.0.0.4.374.5517, update the firmware to version 3.0.0.4.374.5517 or later to resolve the issue. As a temporary workaround, consider restricting access to the Advanced System Content.asp page until the firmware is updated.