CyberSec.Space Logo
Back to CVE Browser

CVE-2014-1982

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0700%
EPSS Percentile16.09th
PublishedMar 31, 2014
Last ModifiedMay 6, 2026

Vulnerability Description

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

Affected Platforms (CPE)

💻
Alliedtelesis

Img646bd Firmware

= 3.5
🔌
Alliedtelesis

Img646bd

All versions
💻
Alliedtelesis

At Rg634a Firmware

= 3.3\+
🔌
Alliedtelesis

At Rg634a

All versions
💻
Alliedtelesis

Img624a Firmware

= 3.5
🔌
Alliedtelesis

Img624a

All versions
💻
Alliedtelesis

Img616lh Firmware

= \+2.4
🔌
Alliedtelesis

Img616lh

All versions

References & Advisories

🔗 http://seclists.org/fulldisclosure/2014/Mar/340
🔗 http://www.exploit-db.com/exploits/32545
🔗 http://seclists.org/fulldisclosure/2014/Mar/340
🔗 http://www.exploit-db.com/exploits/32545

Related Vulnerabilities

CVE-2014-382810.0

Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow re...

CVE-2014-382910.0

displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attacker...

CVE-2014-832910.0

Schrack Technik microControl with firmware before 1.7.0 (937) stores sensitive information under the web root with insufficient ac...

CVE-2014-866910.0

The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code via unspec...