CVE-2014-1982
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (9.51%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 9.51% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78, CWE-287
- Affected
- alliedtelesis/img646bd firmware · alliedtelesis/img646bd · alliedtelesis/at-rg634a firmware · alliedtelesis/at-rg634a · alliedtelesis/img624a firmware · alliedtelesis/img624a · alliedtelesis/img616lh firmware · alliedtelesis/img616lh
- Source
- vultures@jpcert.or.jp
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.