10

CVE-2014-0659

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Rvs4000 Firmware Version <= 2.0.3.2
Cisco ≫ Rvs4000 Firmware Version 1.3.2.0
Cisco ≫ Rvs4000 Firmware Version 1.3.3.5
Cisco ≫ Rvs4000 Firmware Version 2.0.0.3
Cisco ≫ Rvs4000 Firmware Version 2.0.2.7
Cisco ≫ Rvs4000 Version -
Cisco ≫ Wrvs4400n Firmware Version 1.1.03
Cisco ≫ Wrvs4400n Firmware Version 1.1.13
Cisco ≫ Wrvs4400n Firmware Version 2.0.1.3
Cisco ≫ Wrvs4400n Firmware Version 2.0.2.1
Cisco ≫ Wrvs4400n Version -
Cisco ≫ Wap4410n Firmware Version <= 2.0.6.1
Cisco ≫ Wap4410n Firmware Version 2.0.2.1
Cisco ≫ Wap4410n Firmware Version 2.0.3.3
Cisco ≫ Wap4410n Firmware Version 2.0.4.2
Cisco ≫ Wap4410n Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 73.83% 0.994
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

http://secunia.com/advisories/56292
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140110-sbd
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32381
Vendor Advisory
http://www.securityfocus.com/bid/64776
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029579
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029580
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90233
https://github.com/elvanderb/TCP-32764
Patch
Issue Tracking