CVE-2014-9222
Public Exploits 2
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-9222
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Allegro RomPager 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Allegro Software Development RomPager是美国Allegro Software Development公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。 Huawei Home Gateway产品中使用的AllegroSoft RomPager 4.34及之前版本中存在安全漏洞。远程攻击者可借助特制的cookie利用该漏洞提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-9222
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Lets have fun by digging into a Zyxel router firmware and MIPS Arch | https://github.com/BenChaliah/MIPS-CVE-2014-9222 | POC Details |
| 2 | Lets have fun by digging into a Zyxel router firmware and MIPS Arch | https://github.com/donfanning/MIPS-CVE-2014-9222 | POC Details |
| 3 | Lets have fun by digging into a Zyxel router firmware and MIPS Arch | https://github.com/mercul1ninna/MIPS-CVE-2014-9222 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-9222
请登录查看更多情报信息。
Same Patch Batch · n/a · 2014-12-24 · 31 CVEs total
| CVE-2014-6132 | IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞 | |
| CVE-2014-7999 | 多款Cisco-Meraki设备权限许可和访问控制漏洞 | |
| CVE-2014-7995 | 多款Cisco-Meraki设备权限许可和访问控制漏洞 | |
| CVE-2014-7994 | 多款Cisco-Meraki设备输入验证漏洞 | |
| CVE-2014-7993 | 多款Cisco-Meraki设备信息泄露漏洞 | |
| CVE-2014-6188 | IBM WebSphere Service Registry and Repository 跨站脚本漏洞 | |
| CVE-2014-6187 | IBM WebSphere Service Registry and Repository 跨站请求伪造漏洞 | |
| CVE-2014-6186 | IBM WebSphere Service Registry and Repository 权限许可和访问控制漏洞 | |
| CVE-2014-6181 | IBM WebSphere Service Registry and Repository 权限许可和访问控制漏洞 | |
| CVE-2014-6180 | IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞 | |
| CVE-2014-6179 | IBM WebSphere Service Registry and Repository Web UI 跨站脚本漏洞 | |
| CVE-2014-6178 | IBM WebSphere Service Registry and Repository widgets 跨站脚本漏洞 | |
| CVE-2014-6177 | IBM WebSphere Service Registry and Repository 安全漏洞 | |
| CVE-2014-6155 | IBM WebSphere Service Registry and Repository 目录遍历漏洞 | |
| CVE-2014-6153 | IBM WebSphere Service Registry and Repository Web UI 安全漏洞 | |
| CVE-2004-2771 | Heirloom mailx和BSD mailx 输入验证错误漏洞 | |
| CVE-2014-3569 | OpenSSL‘ssl23_get_client_hello()’函数拒绝服务漏洞 | |
| CVE-2014-4322 | QSEECOM driver for the Linux kernel 安全漏洞 | |
| CVE-2014-9418 | Huawei eSpace Desktop eSpace Meeting ActiveX控件缓冲区溢出漏洞 | |
| CVE-2014-9417 | Huawei eSpace Desktop Meeting组件输入验证漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-9222
No comments yet