1. Home
  2. CVE Database
  3. CVE-2014-1982
HIGH · 10.0

CVE-2014-1982

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges a...

Vulnerability Description

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
AlliedtelesisImg646Bd Firmware3.5
AlliedtelesisImg646Bd-
AlliedtelesisAt-Rg634A Firmware3.3\+
AlliedtelesisAt-Rg634A-
AlliedtelesisImg624A Firmware3.5
AlliedtelesisImg624A-
AlliedtelesisImg616Lh Firmware\+2.4
AlliedtelesisImg616Lh-

Related Weaknesses (CWE)

CWE-287CWE-78

References

FAQ

What is CVE-2014-1982?

CVE-2014-1982 is a vulnerability with a CVSS score of 10.0 (HIGH). The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges a...

How severe is CVE-2014-1982?

CVE-2014-1982 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-1982?

Check the references section above for vendor advisories and patch information. Affected products include: Alliedtelesis Img646Bd Firmware, Alliedtelesis Img646Bd, Alliedtelesis At-Rg634A Firmware, Alliedtelesis At-Rg634A, Alliedtelesis Img624A Firmware.