CVE-2014-0659 The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote....
HighCVSS 10.0
EPSS 73.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco rvs4000 firmware | <= 2.0.3.2 | No fix listed |
| cisco rvs4000 firmware | = 1.3.2.0 | No fix listed |
| cisco rvs4000 firmware | = 1.3.3.5 | No fix listed |
| cisco rvs4000 firmware | = 2.0.0.3 | No fix listed |
| cisco rvs4000 firmware | = 2.0.2.7 | No fix listed |
| cisco rvs4000 | All versions | No fix listed |
| cisco wrvs4400n firmware | = 1.1.03 | No fix listed |
| cisco wrvs4400n firmware | = 1.1.13 | No fix listed |
| cisco wrvs4400n firmware | = 2.0.1.3 | No fix listed |
| cisco wrvs4400n firmware | = 2.0.2.1 | No fix listed |
| cisco wrvs4400n | All versions | No fix listed |
| cisco wap4410n firmware | <= 2.0.6.1 | No fix listed |
| cisco wap4410n firmware | = 2.0.2.1 | No fix listed |
| cisco wap4410n firmware | = 2.0.3.3 | No fix listed |
| cisco wap4410n firmware | = 2.0.4.2 | No fix listed |
| cisco wap4410n | All versions | No fix listed |
References
- 56292 third-party-advisory
- 20140110 Undocumented Test Interface in Cisco Small Business Devices vendor-advisory
- tools.cisco.com vendor-advisory
- 64776 third-party-advisory vdb-entry
- 1029579 third-party-advisory vdb-entry
- 1029580 third-party-advisory vdb-entry
- cisco-small-cve20140659-priv-esc(90233) vdb-entry
- github.com issue-tracking patch