Exploitation Summary
CVE-2014-9583 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Friedrich Postelstorfer, Friedrich Postelstorfer, jduck, bcoles, including a Metasploit module exploits/linux/misc/asus_infosvr_auth_bypass_exec.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass vulnerability in the ASUS infosvr service (UDP port 9999) to execute arbitrary commands as root. It launches a BusyBox Telnet daemon on a specified port to gain an interactive remote shell.
Description
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. NOTE: this issue was incorrectly mapped to CVE-2014-10000, but that ID is invalid due to its use as an example of the 2014 CVE ID syntax change.
Exploits (3)
This Metasploit module exploits an authentication bypass vulnerability in the ASUS infosvr service (UDP port 9999) to execute arbitrary commands as root. It launches a BusyBox Telnet daemon on a specified port to gain an interactive remote shell.
This exploit targets a backdoor in ASUSWRT's infosvr service on port 9999, allowing unauthenticated command execution as root via a crafted UDP packet. The command length is limited to 237 bytes to avoid buffer overflow.
This Metasploit module exploits an authentication bypass vulnerability in the ASUS infosvr service (UDP port 9999) to execute arbitrary commands as root. It launches a BusyBox Telnet daemon on a specified port to gain an interactive remote shell.