漏洞描述
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/105173↗seclists.orghttp://seclists.org/fulldisclosure/2014/Dec/87↗www.allegrosoft.comhttps://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html↗mis.fortunecook.iehttp://mis.fortunecook.ie/↗www.huawei.comhttp://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/561444↗