Cisco RVS4000/WRVS4400N/WAP4410N设备测试接口远程特权提升漏洞

BUGTRAQ ID：64776 CVE ID：CVE-2014-0659 Cisco RVS4000/WRVS4400N/WAP4410N是思科公司发行的无线路由器和无线AP。 Cisco WAP4410N Wireless-N Access Point, Cisco WRVS4400N Wireless-N Gigabit Security Router和Cisco RVS4000 4-port Gigabit Security Router产品存在安全漏洞，允许未验证远程攻击者获得对设备的root级的访问。 漏洞是由于受影响设备在TCP...

CVE-2014-0659

CVE-2014-0659 affects Cisco WAP4410N, WRVS4400N, and RVS4000 devices exposing an undocumented test interface on TCP port 32764. The vulnerability allows remote attackers to read credentials/configuration and execute arbitrary commands with root-level access via the test interface. A Cisco advisor...