CVE-2014-9222
HIGH 10.0EPSS 74.0%
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 74.01% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2014-12-24
- Updated
- 2024-08-06
Proof-of-concept exploits (2)
- donfanning/MIPS-CVE-2014-92220★ · 2019-06-12
- luel-4013/misfortune-cookie0★ · 2026-09-07
Metasploit modules (2)
- rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/allegro_rompager_aut…
- rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/allegro_rompager_m…
Security advisories
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666…
- http://mis.fortunecook.ie
- http://seclists.org/fulldisclosure/2014/Dec/87
- http://www.kb.cert.org/vuls/id/561444
- https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for…
- http://www.securityfocus.com/bid/105173