CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

63.75% chance of exploitation in the next 30 days, 99th percentile

Published

2014-12-24

Updated

2024-08-06

Proof-of-concept exploits (1)

• donfanning/MIPS-CVE-2014-92220★ · 2019-06-12

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/allegro_rompager_aut…

References

• CVE Record
• NVD entry

Related

• CVE-2014-9219
• CVE-2014-9224
• CVE-2014-9218
• CVE-2014-9225
• CVE-2014-9215
• CVE-2014-9226