PT-2014-8888 · Allegrosoft+1 · Allegrosoft Rompager+1

Lior Oppenheim · Publicado 2014-12-24 · Atualizado 2016-09-06 · CVE-2014-9223

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AllegroSoft RomPager (affected versions not specified) Huawei Home Gateway products (affected versions not specified)

Description The issue is related to multiple buffer overflows in AllegroSoft RomPager, which can be exploited by remote attackers. This can lead to a denial of service or potentially allow the execution of arbitrary code. The attack vectors are related to authorization, but the specifics are not provided.

Recommendations For AllegroSoft RomPager, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Huawei Home Gateway products, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-9223

Produtos afetados

Allegrosoft Rompager

Huawei Home Gateway

Referências · 5

• https://allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html · Nota
• http://mis.fortunecook.ie · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9223 · Nota de Segurança
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9223 · Nota