critical10.0Public exploit code
CVE-2014-1982
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 all…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Allied Telesis AT-RG634A ADSL Broadband Router - Web Shell2014-03-26 · webapps · hardware
Impact
The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alliedtelesis | Img646bd Firmware | Version 3.5 |
| Alliedtelesis | Img646bd | All versions |
| Alliedtelesis | At-Rg634a Firmware | Version 3.3\+ |
| Alliedtelesis | At-Rg634a | All versions |
| Alliedtelesis | Img624a Firmware | Version 3.5 |
| Alliedtelesis | Img624a | All versions |
| Alliedtelesis | Img616lh Firmware | Version \+2.4 |
| Alliedtelesis | Img616lh | All versions |