CVE-2014-1982

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html...

CVE-2014-1982

The CVE-2014-1982 issue affects Allied Telesis AT-RG634A ADSL Broadband router (3.3+), plus related firmware (iMG624A 3.5, iMG616LH 2.4, iMG646BD 3.5). The root cause is OS command injection via a direct request to cli.html, enabling remote attackers to gain privileges and execute arbitrary comma...

Allied Telesis AT-RG634A Unauthenticated Webshell

Title: Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. Vulnerability Information: - CVE: CVE-2014-1982 - Type of Vulnerability: - CWE-78 : OS Command Injection - CWE-306 : Missing Authentication for Critical Function Affected products: - Allied Teles...