CVE-2014-2718

CVE-2014-2718 describes a critical vulnerability in various ASUS RT-series routers, including models like the RT-AC68U and RT-N66U, where firmware updates lack integrity verification. This flaw allows man-in-the-middle attackers to inject and execute arbitrary code during the update process by providing a malicious firmware image. With a CVSS score of 7.1, the vulnerability is highly severe due to its network-based attack vector and high impact on integrity, requiring medium attack complexity but no authentication. While not listed in CISA's KEV catalog and lacking public exploit intelligence like Metasploit or ExploitDB modules, it has garnered some community discussion and media coverage, indicating awareness despite no confirmed active exploitation.