Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-0659

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.

Published

2014-01-12T18:34:55.957

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco rvs4000_firmware ≤ 2.0.3.2 Yes
Operating System cisco rvs4000_firmware 1.3.2.0 Yes
Operating System cisco rvs4000_firmware 1.3.3.5 Yes
Operating System cisco rvs4000_firmware 2.0.0.3 Yes
Operating System cisco rvs4000_firmware 2.0.2.7 Yes
Hardware cisco rvs4000 - Yes
Operating System cisco wrvs4400n_firmware 1.1.03 Yes
Operating System cisco wrvs4400n_firmware 1.1.13 Yes
Operating System cisco wrvs4400n_firmware 2.0.1.3 Yes
Operating System cisco wrvs4400n_firmware 2.0.2.1 Yes
Hardware cisco wrvs4400n - Yes
Operating System cisco wap4410n_firmware ≤ 2.0.6.1 Yes
Operating System cisco wap4410n_firmware 2.0.2.1 Yes
Operating System cisco wap4410n_firmware 2.0.3.3 Yes
Operating System cisco wap4410n_firmware 2.0.4.2 Yes
Hardware cisco wap4410n - Yes
References