PT-2014-8661 · Compal Broadband Networks · Ch6640E+1

Published 2014-11-06 · Updated 2017-09-08 · CVE-2014-8655

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH

Description The issue allows remote attackers to bypass authentication and obtain sensitive information by manipulating the userData cookie in requests to specific endpoints, including "CmgwWirelessSecurity.xml", "DocsisConfigFile.xml", "CmgwBasicSetup.xml", "basicDDNS.html", "basicLanUsers.html", and "rootDesc.xml". This can be achieved by setting the userData cookie to either an admin or a root value.

Recommendations For Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH, consider restricting access to the mentioned endpoints as a temporary workaround until a patch is available. Avoid using the userData cookie with admin or root values in requests to these endpoints to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-8655

Affected Products

Cg6640E

Ch6640E

References · 7

• 🔥 http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html · Exploit
• 🔥 http://exploit-db.com/exploits/35075 · Exploit
• 🔥 https://exploit-db.com/exploits/35075 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8655 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98331 · Note
• http://securityfocus.com/bid/70762 · Note
• http://osvdb.org/show/osvdb/113837 · Note