CVE-2017-14699

CVE-2017-14699 describes multiple XML External Entity (XXE) vulnerabilities within the AiCloud feature of numerous ASUS DSL router models. An authenticated attacker can exploit this flaw by sending crafted DTDs in UPDATEACCOUNT or PROPFIND requests to read arbitrary files on the affected devices. Rated Medium severity with a CVSS score of 6.5, this vulnerability requires authentication but has low attack complexity, potentially leading to high confidentiality impact. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.