CVE-2014-9583
Description
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. NOTE: this issue was incorrectly mapped to CVE-2014-10000, but that ID is invalid due to its use as an example of the 2014 CVE ID syntax change.
No summary for this CVE yet.
CVSS Vector Breakdown
Exploitability
AV:NAccess VectorNetwork
AC:LAccess ComplexityLow
Au:NAuthenticationNone
Impact
C:CConfidentialityComplete
I:CIntegrityComplete
A:CAvailabilityComplete
Weaknesses
Affected Products
and 1 more affected products View all →
Exploitability
4 exploit sources identified
Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.
View exploit detailsReferences
http://packetstormsecurity.com/files/129815/ASUSWRT-3.0.0.4.376_1071-LAN-Backdoor-Command-Execution.html
packetstormsecurity.com
http://www.exploit-db.com/exploits/35688
exploit-db.com
https://github.com/jduck/asus-cmd
github.com
and 2 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2014-9583 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows