Exploitation Summary
CVE-2014-9222 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including BenChaliah, mercul1ninna, donfanning, including a Metasploit module auxiliary/admin/http/allegro_rompager_auth_bypass.
AI-analyzed exploit summary This repository provides a detailed writeup and reverse engineering analysis of CVE-2014-9222, focusing on the 'Misfortune Cookie' vulnerability in RomPager 4.07. It includes steps for firmware extraction, debugging, and identifying the password generation algorithm for hidden commands.
Description
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
Exploits (5)
This repository provides a detailed writeup and reverse engineering analysis of CVE-2014-9222, focusing on the 'Misfortune Cookie' vulnerability in RomPager 4.07. It includes steps for firmware extraction, debugging, and identifying the password generation algorithm for hidden commands.
This repository provides a detailed technical analysis of CVE-2014-9222, focusing on reverse engineering the firmware of a ZXHN H108L router running Rompager 4.07. It includes steps for dynamic and static analysis, such as extracting firmware, identifying hidden debug commands, and analyzing the password generator algorithm in MIPS assembly.
This repository provides a detailed technical analysis of CVE-2014-9222, focusing on reverse engineering the firmware of a ZXHN H108L router to exploit the 'Misfortune Cookie' vulnerability in RomPager 4.07. It includes steps for dynamic and static analysis, firmware extraction, and identifying the password generator algorithm.
This Metasploit module exploits the 'Misfortune Cookie' vulnerability (CVE-2014-9222) in Allegro Software RomPager versions before 4.34, allowing authentication bypass by sending crafted cookie values to vulnerable devices.
This Metasploit module scans for the 'Misfortune Cookie' vulnerability (CVE-2014-9222) in Allegro Software RomPager versions before 4.34. It checks for the vulnerability by testing if a crafted cookie can overwrite the requested URI, potentially allowing authentication bypass.