CVE-2014-0659
Critical
Description
The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Cisco Rvs4000 Firmware
PublishedJan 12, 2014
First seenJan 12, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco rvs4000_firmware | v ≤ 2.0.3.2, 1.3.2.0, 1.3.3.5, 2.0.0.3, 2.0.2.7 | — |
| cisco rvs4000 | No range specified | — |
| cisco wrvs4400n_firmware | 1.1.03, 1.1.13, 2.0.1.3, 2.0.2.1 | — |
| cisco wrvs4400n | No range specified | — |
| cisco wap4410n_firmware | v ≤ 2.0.6.1, 2.0.2.1, 2.0.3.3, 2.0.4.2 | — |
| cisco wap4410n | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.