NVD

Id
36235  
Name
CVE-2014-9583  
Description
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. NOTE: this issue was incorrectly mapped to CVE-2014-10000, but that ID is invalid due to its use as an example of the 2014 CVE ID syntax change.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-08  
Modified Date
2016-06-30  
Seq
2014-9583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185101 36235 CVE-2014-9583 http://packetstormsecurity.com/files/129815/ASUSWRT-3.0.0.4.376_1071-LAN-Backdoor-Command-Execution.html  View
185102 36235 CVE-2014-9583 35688  View
185103 36235 CVE-2014-9583 https://github.com/jduck/asus-cmd  View
185104 36235 CVE-2014-9583 https://support.t-mobile.com/docs/DOC-21994  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18675 JVNDB-2014-007550 複数の ASUS ルータで使用される WRT ファームウェアにおける認証を回避される脆弱性 ASUS RT-AC66U、RT-N66U、および他のルータで使用される WRT ファームウェアは、リクエストの MAC アドレスを適切にチェックしないため、認証を回避される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2014-9583 76876 CVE-2014-9583 36235 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007550.html 2014-10-11 2016-02-10 View