‹ Back to list

CVE-2014-1982

Status: ModifiedHigh (10)—Exploit
Severity10High · CVSS 2.0
Exploitation probability9.43 %higher than 95% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

CVSS

Base score
10
Version
2.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
9.43 %
Percentile among all scored CVEs
95
Score date
10/22/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (8)

Alliedtelesis — At-rg634aAlliedtelesis — At-rg634a FirmwareAlliedtelesis — Img616lhAlliedtelesis — Img616lh FirmwareAlliedtelesis — Img624aAlliedtelesis — Img624a FirmwareAlliedtelesis — Img646bdAlliedtelesis — Img646bd Firmware

CWEs

References

Show 4 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2014-1982",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-03-31T14:58:35.803",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2014/Mar/340",
      "tags": [
        "Exploit"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://www.exploit-db.com/exploits/32545",
      "tags": [
        "Exploit"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Mar/340",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/32545",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        },
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html."
    },
    {
      "lang": "es",
      "value": "La interfaz administrativa en el router de banda ancha de Allied Telesis AT-RG634A ADSL 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4 y iMG646BD firmware 3.5 permite a atacantes remotos ganar privilegios y ejecutar comandos arbitrarios a través de una solicitud directa hacia cli.html."
    }
  ],
  "lastModified": "2026-06-17T00:05:52.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:img646bd_firmware:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A5DA671-95C9-4802-83F1-EC3D4CE4EAA7"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:img646bd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "430D2A6E-95DA-464B-A028-27D3BD950DE0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:at-rg634a_firmware:3.3\\+:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B50D486-5D15-4766-8B33-AC20F49C70E9"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:at-rg634a:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E0C6ED1-8D5C-43E0-AC26-D33346BC3DCE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:img624a_firmware:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3669B218-50EB-42DF-886C-67D0B181A24B"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:img624a:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "734DB0FD-42F2-445D-B38E-EA1A403257D3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:alliedtelesis:img616lh_firmware:\\+2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D99D907-1FD0-481A-95A9-CA96309BC31C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:alliedtelesis:img616lh:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F929312-34DB-4A4C-B8CD-D0387227F2F5"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}