CVE-2014-9583

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does…

published January 8, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
80%
Percentile
99.6
In the wild
Unconfirmed
What it is

⚠️ A crafty exploit can bypass your router's authentication with just a special packet! 🎉 Think of it like a delivery service that accepts packages without checking who's sending them — the courier might just drop off anything at your doorstep, no questions asked. An attacker could send a specially crafted packet to your router and execute arbitrary commands, potentially gaining full control over your device. This could mean unauthorized access to your network, data interception, or even using your router as a launchpad for further attacks — absolutely devastating!

Put simply

Think of it like a delivery service that accepts packages without checking who's sending them — the courier might just drop off anything at your doorstep, no questions asked. This vulnerability in the ASUS WRT firmware fails to properly verify the MAC address of incoming requests, allowing attackers to leverage a NET_CMD_ID_MANU_CMD packet sent to UDP port 9999 to bypass authentication and execute commands remotely.

What to do

An attacker could send a specially crafted packet to your router and execute arbitrary commands, potentially gaining full control over your device. This could mean unauthorized access to your network, data interception, or even using your router as a launchpad for further attacks — absolutely devastating! To secure your router, update to the latest firmware version from ASUS immediately. Additionally, consider changing the default settings and disabling remote management features to further protect your device. Regularly check for updates to stay ahead of potential threats! You've got this! With these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.80235 · 99.6th percentile
Published
2015-01-08T20:00Z
EPSS history
Timeline
  • 08 JAN 20:00Z
    common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does…
    cvelistv5