CVE-2014-0659

The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router…

published January 12, 2014

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

🚨 Remote attackers can peek behind the curtain of your Cisco devices! With a simple request to TCP port 32764, they can read sensitive credentials and execute arbitrary commands. 🔥 Think of this vulnerability like an unlocked door to a restricted area in a café—anyone can stroll in and take a peek at your secret recipe book without breaking a sweat! If exploited, an attacker could gain access to your device's settings and sensitive data, potentially leading to unauthorized changes and a complete compromise of your network. This could be devastating for your organization, as it opens the door to further attacks or data breaches.

Put simply

Think of this vulnerability like an unlocked door to a restricted area in a café—anyone can stroll in and take a peek at your secret recipe book without breaking a sweat! The vulnerability exists in the Cisco WAP4410N, WRVS4400N, and RVS4000 devices, allowing remote attackers to access configuration and credential data through the test interface on TCP port 32764. This means attackers can execute commands without proper authorization.

What to do

If exploited, an attacker could gain access to your device's settings and sensitive data, potentially leading to unauthorized changes and a complete compromise of your network. This could be devastating for your organization, as it opens the door to further attacks or data breaches. Immediate action is required: update to the latest firmware versions—2.0.6.1 for WAP4410N, 2.0.2.1 for WRVS4400N, and 2.0.3.2 for RVS4000. Additionally, consider blocking access to TCP port 32764 from untrusted networks to reduce risk. You've got this! Secure your devices, and you'll be well on your way to protecting your network like a true security hero! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73825 · 99.5th percentile
Published
2014-01-12T15:00Z
EPSS history
Timeline
  • 12 JAN 15:00Z
    The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router…
    cvelistv5