CVE-2014-0659 — Vulnetix

CVE-2014-0659 PUBLISHED CVSS 10 CRITICAL

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.

EPSS 65.60% · 98.5th percentile

Risk Scores

CVSS 2.0

EPSS Score

65.60%

98.5th percentile

Affected Products

Vendor	Product	Versions
Cisco	Small Business
cisco	wap4410n_firmware	2.0.2.1, 2.0.4.2, 2.0.3.3
cisco	wrvs4400n
cisco	rvs4000_firmware	0, 1.3.2.0, 2.0.2.7
cisco	wap4410n
cisco	wrvs4400n_firmware	2.0.1.3, 1.1.13, 1.1.03
n/a	n/a	*
cisco	rvs4000

Exploit Intelligence

CIRCL seen: CVE-2014-0659 (circl-sighting)
CIRCL seen: CVE-2014-0659 (circl-sighting)
CIRCL seen: CVE-2014-0659 (circl-sighting)
CIRCL seen: CVE-2014-0659 (circl-sighting)
CIRCL seen: CVE-2014-0659 (circl-sighting)
64776 (circl)
1029579 (circl)
https://github.com/elvanderb/TCP-32764 (circl)
http://tools.cisco.com/security/center/viewAlert.x?alertId=32381 (circl)
1029580 (circl)

…and 3 more exploits

Timeline

Jan 10, 2014 CVE Published
May 24, 2018 PoC Published
May 29, 2018 PoC Published
Feb 4, 2022 EPSS Score
May 20, 2022 EPSS Score
Jun 26, 2022 EPSS Score
Sep 3, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Mar 29, 2023 EPSS Score
Apr 2, 2023 EPSS Score
Jul 16, 2023 EPSS Score

References

56292 third-party-advisory
20140110 Undocumented Test Interface in Cisco Small Business Devices vendor-advisory
cisco-small-cve20140659-priv-esc(90233) vdb
64776 vdb
1029580 vdb
http://tools.cisco.com/security/center/viewAlert.x?alertId=32381 url
1029579 vdb
https://github.com/elvanderb/TCP-32764 url
https://nvd.nist.gov/vuln/detail/CVE-2014-0659 advisory

Open in Interactive Console →