CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2014-1982

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0700%
EPSS Percentile16.09th
Published2014年3月31日
Last Modified2026年5月6日

Vulnerability Description

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

Affected Platforms (CPE)

💻
Alliedtelesis

Img646bd Firmware

= 3.5
🔌
Alliedtelesis

Img646bd

All versions
💻
Alliedtelesis

At Rg634a Firmware

= 3.3\+
🔌
Alliedtelesis

At Rg634a

All versions
💻
Alliedtelesis

Img624a Firmware

= 3.5
🔌
Alliedtelesis

Img624a

All versions
💻
Alliedtelesis

Img616lh Firmware

= \+2.4
🔌
Alliedtelesis

Img616lh

All versions

References & Advisories

🔗 http://seclists.org/fulldisclosure/2014/Mar/340
🔗 http://www.exploit-db.com/exploits/32545
🔗 http://seclists.org/fulldisclosure/2014/Mar/340
🔗 http://www.exploit-db.com/exploits/32545

相關漏洞威脅

CVE-2014-052810.0

Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attac...

CVE-2014-052510.0

The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unm...

CVE-2014-052310.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...

CVE-2014-052910.0

Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to ex...