CVE-2014-9222

High

Published: 24/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

AllegroSoft RomPager version 4.34 and earlier, used in Huawei Home Gateway products and other vendors, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, known as the 'Misfortune Cookie' vulnerability.

Risk Assessment

This vulnerability may allow attackers to remotely take control of the device, posing a serious threat to network security and user data.

Recommendation

It is recommended to update AllegroSoft RomPager to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in AllegroSoft RomPager

CVE-2014-9223High
Multiple buffer overflows in AllegroSoft RomPager, used in Huawei Home Gateway products and other vendors, allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors related to authorization.

Original NVD description (English source)

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.