Lucene search
PRIOn knowledge basePRION:CVE-2014-9583HistoryJan 08, 2015 - 8:59 p.m.
Authentication flaw
2015-01-0820:59:00
PRIOn knowledge base
www.prio-n.com
5
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. NOTE: this issue was incorrectly mapped to CVE-2014-10000, but that ID is invalid due to its use as an example of the 2014 CVE ID syntax change.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wrt_firmware | eq | 3.0.43762524-g12-f52 | |
| wrt_firmware | eq | 3.0.43761071 | |
| tm-ac1900 | eq | 3.0.43763169 |
Related
cvelist
cvelist
CVE-2014-9583
2015-01-08 20:00:00
CVE-2014-10000
2015-01-13 11:00:00
cve
cve
CVE-2014-9583
2015-01-08 20:59:02
CVE-2014-10000
2015-01-13 11:59:00
nvd
nvd
CVE-2014-9583
2015-01-08 20:59:02
CVE-2014-10000
2015-01-13 11:59:00
prion
prion
Design/Logic Flaw
2015-01-13 11:59:00
zdt
zdt
YourMembers Blind SQL Injection Vulnerability
2015-01-21 00:00:00
ASUS infosvr Authentication Bypass Command Execution Exploit
2018-04-22 00:00:00
saint
saint
ASUS Router infosvr Service Remote Command Execution Vulnerability
2015-01-13 00:00:00
ASUS Router infosvr Service Remote Command Execution Vulnerability
2015-01-13 00:00:00
ASUS Router infosvr Service Remote Command Execution Vulnerability
2015-01-13 00:00:00
checkpoint_advisories
checkpoint_advisories
ASUSWRT LAN Backdoor Remote Command Execution (CVE-2014-9583)
2016-10-26 00:00:00
packetstorm
packetstorm
ASUS infosvr Authentication Bypass Command Execution
2018-04-21 00:00:00
AsusWRT Router Remote Code Execution
2018-01-26 00:00:00
nessus
nessus
ASUS Router 'infosvr' Remote Command Execution
2015-01-14 00:00:00
seebug
seebug
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
2015-07-02 00:00:00
exploitpack
exploitpack
AsusWRT Router 3.0.0.4.380.7743 - LAN Remote Code Execution
2018-01-22 00:00:00
threatpost
threatpost
exploitdb
exploitdb
AsusWRT Router < 3.0.0.4.380.7743 - LAN Remote Code Execution
2018-01-22 00:00:00