PT-2014-8663 · Compal Broadband Networks · Cg6640E+1

Gjoko Krstic · Published 2014-11-06 · Updated 2017-09-08 · CVE-2014-8657

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH

Description The issue allows remote attackers to cause a denial of service, which results in disconnecting all WiFi clients. This can be achieved by sending a request to the "wirelessChannelStatus.html" endpoint.

Recommendations For Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH, consider restricting access to the "wirelessChannelStatus.html" endpoint as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2014-8657

Affected Products

Cg6640E

Ch6640E

References · 7

• 🔥 http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html · Exploit
• 🔥 http://exploit-db.com/exploits/35075 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php · Exploit
• 🔥 https://exploit-db.com/exploits/35075 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8657 · Security Note
• http://osvdb.org/show/osvdb/113838 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98330 · Note