Unscored severity · published Jan 12, 2014
CVE-2014-0659
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through…
–
CVSS
73.8%
EPSS
No
On KEV
Description
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.8% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RV
Rvs4000 · Cisco
All versions, or not specified · source: NVD
RF
Rvs4000 Firmware · Cisco
through 2.0.3.2; 1.3.2.0; 1.3.3.5; 2.0.0.3; 2.0.2.7 · source: NVD
WA
Wap4410n · Cisco
All versions, or not specified · source: NVD
WF
Wap4410n Firmware · Cisco
through 2.0.6.1; 2.0.2.1; 2.0.3.3; 2.0.4.2 · source: NVD
WR
Wrvs4400n · Cisco
All versions, or not specified · source: NVD
WF
Wrvs4400n Firmware · Cisco
1.1.03; 1.1.13; 2.0.1.3; 2.0.2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0659
secunia.com
http://secunia.com/advisories/56292
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140110-sbd
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32381
Third Party Advisory
http://www.securityfocus.com/bid/64776
Third Party Advisory
http://www.securitytracker.com/id/1029579
Third Party Advisory
http://www.securitytracker.com/id/1029580
More from Rvs4000
–
CVE-2011-1647
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with…
–
CVE-2011-1646
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with…
–
CVE-2011-1645
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with…
–
CVE-2010-0593
The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before…