CVE-2014-9222

🗓️ 24 Dec 2014 18:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 236 Views🌐 WEB

AllegroSoft RomPager 4.34 - "Misfortune Cookie" vulnerabilit

Reporter	Title	Published	Views	Family All 32
zdt	RomPager 4.34 - Misfortune Cookie Router Authentication Bypass	27 Apr 201600:00	–	zdt
Tenable Nessus	Allegro RomPager 4.07 < 4.34 Multiple Vulnerabilities (Misfortune Cookie)	20 Feb 201500:00	–	nessus
Tenable Nessus	Allegro RomPager HTTP Cookie Management Remote Code Execution Vulnerability (Misfortune Cookie)	30 Dec 201400:00	–	nessus
Tenable Nessus	Allegro RomPager HTTP Cookie Management Remote Code Execution Vulnerability (Misfortune Cookie)	24 Dec 201400:00	–	nessus
Circl	CVE-2014-9222	29 May 201815:50	–	circl
Check Point Advisories	RomPager Authentication Security Bypass - Misfortune Cookie (CVE-2014-9222)	3 Dec 201400:00	–	checkpoint_advisories
Cvelist	CVE-2014-9222	24 Dec 201418:00	–	cvelist
canvas	Immunity Canvas: CVE_2014_9222	24 Dec 201418:59	–	canvas
exploitpack	RomPager 4.34 (Multiple Router Vendors) - Misfortune Cookie Authentication Bypass	27 Apr 201600:00	–	exploitpack
Huawei	Security Advisory-Multiple Vulnerabilities in the RomPager Component of Home Gateway	19 Dec 201400:00	–	huawei

NVD

Node

allegrosoft rompagerRange≤4.07

Source	Link
huawei	www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm
mis	www.mis.fortunecook.ie/
allegrosoft	www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html
seclists	www.seclists.org/fulldisclosure/2014/Dec/87
kb	www.kb.cert.org/vuls/id/561444
securityfocus	www.securityfocus.com/bid/105173

Parameter	Position	Path	Description	CWE
NewNTPServer1	path	UD/act?1	SOAP request endpoint used by TR-064 Time service; manipulating NewNTPServer1 can inject commands to alter device configuration, potentially defeating access controls.	CWE-17

17 Jun 2026 00:17Current

7.7High risk

Vulners AI Score7.7

CVSS 210

EPSS0.63748

allegrosoft rompager "misfortune cookie"cve-2014-9222 memory corruption huawei home gateway remote attackers privilege escalation