CVE-2014-2046

Published: May 14, 2014Modified: May 6, 2026

9.7

Vector

AV:N/AC:L/Au:N/C:P/I:C/A:C

Exploitability: 10.0 / Impact: 9.5

Source: NVD

Description

cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to (1) obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcludePaths method or (2) modify the firmware via unspecified vectors.

Affected (2)

Products: Broadcom: Pipa C211 Web Interface, Pipa C211

2 products

Pipa C211 Web Interface

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Broadcom Pipa C211 Web Interface	Version 1.1
Broadcom Pipa C211	All versions

Related CWEs

References (4)

http://seclists.org/fulldisclosure/2014/May/58

Source: cve@mitre.org

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2046/

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2014/May/58

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2046/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.