Vulnerability in Compal Broadband Networks Cg6640e Wireless Gateway
CVE-2014-8655
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, (2) DocsisConfigFile.xml, or (3) CmgwBasicSetup.xml in xml/ or (4) basicDDNS.html, (5) basicLanUsers.html, or (6) rootDesc.xml.
EPSS: 0.074 (93.8th percentile) — read the EPSS interpretation.
Affected products
- Compal_broadband_networks Cg6640e_wireless_gateway — versions 1.0
- Compal_broadband_networks Ch664oe_wireless_gateway — versions 1.0
- Compal_broadband_networks Firmware — versions ch6640-3.5.11.7-nosh
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, x_refsource_MISC)