CVE-2014-2719: ASUS Rt-AC66U Firmware

Medium severity, CVSS 6.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authenticated users to obtain the administrator user name and password by reading the source code.

Affected products

ASUS Rt-AC66U Firmware: version 3.0.0.4.140 only; version 3.0.0.4.220 only; version 3.0.0.4.246 only; version 3.0.0.4.260 only; version 3.0.0.4.270 only; version 3.0.0.4.354 only
ASUS Rt-AC68U
ASUS Rt-AC68U Firmware: version 3.0.0.4.374.4755 only; version 3.0.0.4.374_4561 only; version 3.0.0.4.374_4887 only
ASUS Rt-n10e Firmware: version 2.0.0.7 only; version 2.0.0.10 only; version 2.0.0.16 only; version 2.0.0.19 only; version 2.0.0.20 only; version 2.0.0.24 only; …
ASUS Rt-n14u Firmware: version 3.0.0.4.322 only; version 3.0.0.4.356 only
ASUS Rt-n16 Firmware: version 1.0.1.9 only; version 1.0.2.3 only; version 3.0.0.3.108 only; version 3.0.0.3.162 only; version 3.0.0.3.178 only; version 3.0.0.4.220 only; …
ASUS Rt-n56u Firmware: version 1.0.1.4 only; version 1.0.1.4o only; version 1.0.1.7c only; version 1.0.1.7f only; version 1.0.1.8j only; version 1.0.1.8l only; …
ASUS Rt-n65u Firmware: version 3.0.0.3.134 only; version 3.0.0.3.176 only; version 3.0.0.4.260 only; version 3.0.0.4.334 only; version 3.0.0.4.342 only; version 3.0.0.4.346 only
ASUS Rt-n66u Firmware: version 3.0.0.4.272 only; version 3.0.0.4.370 only
T-Mobile TM-AC1900: version 3.0.0.4.376_3169 only

Published 2014-04-22. Last modified 2026-06-17.