CVE-2014-0659

2014-01-1218:34:00

CWE-78

[email protected]

web.nvd.nist.gov

cisco

wap4410n

wrvs4400n

rvs4000

remote code execution

tcp port

cve-2014-0659

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.216 Low

EPSS

Percentile

96.4%

JSON

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.

CPENameOperatorVersion
cisco:rvs4000_firmwarecisco rvs4000 firmwarele2.0.3.2
cisco:rvs4000_firmwarecisco rvs4000 firmwareeq1.3.2.0
cisco:rvs4000_firmwarecisco rvs4000 firmwareeq1.3.3.5
cisco:rvs4000_firmwarecisco rvs4000 firmwareeq2.0.0.3
cisco:rvs4000_firmwarecisco rvs4000 firmwareeq2.0.2.7
cisco:rvs4000cisco rvs4000eq-
cisco:wrvs4400n_firmwarecisco wrvs4400n firmwareeq1.1.03
cisco:wrvs4400n_firmwarecisco wrvs4400n firmwareeq1.1.13
cisco:wrvs4400n_firmwarecisco wrvs4400n firmwareeq2.0.1.3
cisco:wrvs4400n_firmwarecisco wrvs4400n firmwareeq2.0.2.1

CPE	Name	Operator	Version
cisco:rvs4000_firmware	cisco rvs4000 firmware	le	2.0.3.2
cisco:rvs4000_firmware	cisco rvs4000 firmware	eq	1.3.2.0
cisco:rvs4000_firmware	cisco rvs4000 firmware	eq	1.3.3.5
cisco:rvs4000_firmware	cisco rvs4000 firmware	eq	2.0.0.3
cisco:rvs4000_firmware	cisco rvs4000 firmware	eq	2.0.2.7
cisco:rvs4000	cisco rvs4000	eq	-
cisco:wrvs4400n_firmware	cisco wrvs4400n firmware	eq	1.1.03
cisco:wrvs4400n_firmware	cisco wrvs4400n firmware	eq	1.1.13
cisco:wrvs4400n_firmware	cisco wrvs4400n firmware	eq	2.0.1.3
cisco:wrvs4400n_firmware	cisco wrvs4400n firmware	eq	2.0.2.1