CVE-2014-0659 Command injection in n/a
Remote attackers can execute arbitrary commands and read sensitive data via the test interface on affected Cisco routers and access points.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-0659?
CVE-2014-0659 is a critical command injection vulnerability in n/a, published on 12 Jan 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
Weakness: CWE-78
Which versions are affected by CVE-2014-0659?
It affects 6 products.
Products include Cisco Rvs4000, Cisco Rvs4000 Firmware, Cisco Wap4410n, Cisco Wap4410n Firmware, Cisco Wrvs4400n, Cisco Wrvs4400n Firmware.
How do I fix CVE-2014-0659?
No fix has been published for CVE-2014-0659 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2014-0659 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2014-0659 exists.
Public exploit code: 2 Metasploit modules and 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-vx5m-4g29-886g.