CVE-2014-1982 The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges a...
HighCVSS 10.0
EPSS 9.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alliedtelesis img646bd firmware | = 3.5 | No fix listed |
| alliedtelesis img646bd | All versions | No fix listed |
| alliedtelesis at-rg634a firmware | = 3.3+ | No fix listed |
| alliedtelesis at-rg634a | All versions | No fix listed |
| alliedtelesis img624a firmware | = 3.5 | No fix listed |
| alliedtelesis img624a | All versions | No fix listed |
| alliedtelesis img616lh firmware | = +2.4 | No fix listed |
| alliedtelesis img616lh | All versions | No fix listed |