CVE-2014-0659

Published: Jan 12, 2014Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.

Affected (16)

Products: Cisco: Rvs4000 Firmware, Rvs4000, Wrvs4400n Firmware, Wrvs4400n, Wap4410n Firmware, Wap4410n

6 products

Rvs4000 Firmware

Wrvs4400n Firmware

Wap4410n Firmware

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Rvs4000 Firmware	Up to 2.0.3.2
Cisco Rvs4000 Firmware	Version 1.3.2.0
Cisco Rvs4000 Firmware	Version 1.3.3.5
Cisco Rvs4000 Firmware	Version 2.0.0.3
Cisco Rvs4000 Firmware	Version 2.0.2.7
Cisco Rvs4000	All versions

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Wrvs4400n Firmware	Version 1.1.03
Cisco Wrvs4400n Firmware	Version 1.1.13
Cisco Wrvs4400n Firmware	Version 2.0.1.3
Cisco Wrvs4400n Firmware	Version 2.0.2.1
Cisco Wrvs4400n	All versions

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Wap4410n Firmware	Up to 2.0.6.1
Cisco Wap4410n Firmware	Version 2.0.2.1
Cisco Wap4410n Firmware	Version 2.0.3.3
Cisco Wap4410n Firmware	Version 2.0.4.2
Cisco Wap4410n	All versions

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (16)

http://secunia.com/advisories/56292

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140110-sbd

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32381

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/64776

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029579

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029580

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90233

Source: psirt@cisco.com

https://github.com/elvanderb/TCP-32764

Source: psirt@cisco.com

Issue TrackingPatch

http://secunia.com/advisories/56292

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140110-sbd

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32381

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/64776

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029579

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1029580

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90233

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/elvanderb/TCP-32764

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

Timeline

No history available yet.