CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via aโ€ฆ

published December 24, 2014

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
โ€”
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

๐Ÿšจ Ever heard of the "Misfortune Cookie"? This sneaky vulnerability in AllegroSoft RomPager allows attackers to elevate their privileges with a cleverly crafted cookie! ๐Ÿช Think of it like a restaurant where a diner slips a note under the table that claims they're the head chef โ€” just one special cookie can let them take control behind the scenes! If exploited, an attacker could gain unauthorized access to critical functions, potentially enabling them to modify settings or even hijack the device. This could lead to a host of problems, like compromised privacy or network integrity. Quite the recipe for disaster!

Put simply

Think of it like a restaurant where a diner slips a note under the table that claims they're the head chef โ€” just one special cookie can let them take control behind the scenes! The Misfortune Cookie vulnerability stems from improper handling of cookies, which can trigger memory corruption and allow attackers to gain elevated privileges in AllegroSoft RomPager versions 4.34 and earlier.

What to do

If exploited, an attacker could gain unauthorized access to critical functions, potentially enabling them to modify settings or even hijack the device. This could lead to a host of problems, like compromised privacy or network integrity. Quite the recipe for disaster! To protect yourself, update AllegroSoft RomPager to the latest version and ensure that your Huawei Home Gateway products are patched. If you're using any of these affected components, take action now! You've got this! Follow these steps to secure your systems and keep those cookies in check! ๐Ÿ’ช

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.74010 ยท 99.5th percentile
Published
2014-12-24T18:00Z
EPSS history
Timeline
  • 21 OCT 03:06Z
    EPSS moved 64% โ†’ 74%
    epss
  • 20 OCT 03:07Z
    EPSS moved 64% โ†’ 74%
    epss
  • 24 DEC 18:00Z
    AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via aโ€ฆ
    cvelistv5