CVE-2014-1982

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

9.90% chance of exploitation in the next 30 days, 95th percentile

Published

2014-03-28

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/32545

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32545

References

• CVE Record
• NVD entry

Related

• CVE-2014-1947
• CVE-2014-1990
• CVE-2014-1945
• CVE-2014-2008
• CVE-2014-1944
• CVE-2014-2009