CVE:CVE-2014-2719
CNNVD:CNNVD-201404-434
ASUS RT Series Routers是华硕（ASUS）公司的RT系列路由器产品。
使用3.0.0.4.374.5517之前版本固件的ASUS RT系列路由器的Advanced_System_Content.asp文件存在安全漏洞。当管理员会话处于活动状态时，远程攻击者可通过读取源代码利用该漏洞获取用户名和密码。
solution:Upgrade asus rt-ac66u_firmware to a higher version than 3.0.0.4.140,3.0.0.4.220,3.0.0.4.246,3.0.0.4.260,3.0.0.4.270,3.0.0.4.354,and avoid the version 3.0.0.4.140,3.0.0.4.220,3.0.0.4.246,3.0.0.4.260,3.0.0.4.270,3.0.0.4.354; Upgrade asus rt-ac68u_firmware to a higher version than 3.0.0.4.374.4755,3.0.0.4.374_4561,3.0.0.4.374_4887,and avoid the version 3.0.0.4.374.4755,3.0.0.4.374_4561,3.0.0.4.374_4887; Upgrade asus rt-n10e_firmware to a higher version than 2.0.0.7,2.0.0.10,2.0.0.16,2.0.0.19,2.0.0.20,2.0.0.24,2.0.0.25,and avoid the version 2.0.0.7,2.0.0.10,2.0.0.16,2.0.0.19,2.0.0.20,2.0.0.24,2.0.0.25; Upgrade asus rt-n14u_firmware to a higher version than 3.0.0.4.322,3.0.0.4.356,and avoid the version 3.0.0.4.322,3.0.0.4.356; Upgrade asus rt-n16_firmware to a higher version than 1.0.1.9,1.0.2.3,3.0.0.3.108,3.0.0.3.162,3.0.0.3.178,3.0.0.4.220,3.0.0.4.246,3.0.0.4.260,3.0.0.4.354,7.0.2.38b,and avoid the version 1.0.1.9,1.0.2.3,3.0.0.3.108,3.0.0.3.162,3.0.0.3.178,3.0.0.4.220,3.0.0.4.246,3.0.0.4.260,3.0.0.4.354,7.0.2.38b; Upgrade asus rt-n56u_firmware to a higher version than 1.0.1.4,1.0.1.4o,1.0.1.7c,1.0.1.7f,1.0.1.8j,1.0.1.8l,1.0.1.8n,3.0.0.4.318,3.0.0.4.334,3.0.0.4.342,3.0.0.4.360,7.0.1.21,7.0.1.32,8.1.1.4,and avoid the version 1.0.1.4,1.0.1.4o,1.0.1.7c,1.0.1.7f,1.0.1.8j,1.0.1.8l,1.0.1.8n,3.0.0.4.318,3.0.0.4.334,3.0.0.4.342,3.0.0.4.360,7.0.1.21,7.0.1.32,8.1.1.4; Upgrade asus rt-n65u_firmware to a higher version than 3.0.0.3.134,3.0.0.3.176,3.0.0.4.260,3.0.0.4.334,3.0.0.4.342,3.0.0.4.346,and avoid the version 3.0.0.3.134,3.0.0.3.176,3.0.0.4.260,3.0.0.4.334,3.0.0.4.342,3.0.0.4.346; Upgrade asus rt-n66u_firmware to a higher version than 3.0.0.4.272,3.0.0.4.370,and avoid the version 3.0.0.4.272,3.0.0.4.370; Upgrade asus rt-ac68u to a higher version than -; Upgrade t-mobile tm-ac1900 to a higher version than 3.0.0.4.376_3169,and avoid the version 3.0.0.4.376_3169