PT-2014-8888 · Allegrosoft+1 · Allegrosoft Rompager+1

Lior Oppenheim · Published 2014-12-24 · Updated 2016-09-06 · CVE-2014-9223

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AllegroSoft RomPager (affected versions not specified) Huawei Home Gateway products (affected versions not specified)

Description The issue is related to multiple buffer overflows in AllegroSoft RomPager, which can be exploited by remote attackers. This can lead to a denial of service or potentially allow the execution of arbitrary code. The attack vectors are related to authorization, but the specifics are not provided.

Recommendations For AllegroSoft RomPager, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Huawei Home Gateway products, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-9223

Affected Products

Allegrosoft Rompager

Huawei Home Gateway

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-9223 · Security Note
• http://huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm · Vendor Advisory
• https://allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html · Note
• http://mis.fortunecook.ie · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9223 · Note