critical10.0Public exploit code

CVE-2014-0659

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router wi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

SerComm Device - Remote Code Execution (Metasploit)2014-01-14 · remote · hardware · Verified

Impact

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.

Affected products

Vendor	Product	Affected versions
Cisco	Rvs4000 Firmware	through 2.0.3.2 Versions 1.3.2.0, 1.3.3.5, 2.0.0.3, 2.0.2.7
Cisco	Rvs4000	All versions
Cisco	Wrvs4400n Firmware	Versions 1.1.03, 1.1.13, 2.0.1.3, 2.0.2.1
Cisco	Wrvs4400n	All versions
Cisco	Wap4410n Firmware	through 2.0.6.1 Versions 2.0.2.1, 2.0.3.3, 2.0.4.2
Cisco	Wap4410n	All versions

Weakness classification

CWE-78

Public exploit code

Impact

Affected products

Weakness classification

References