CVE-2014-8655

Name: CVE-2014-8655
Creator: NVD / NIST
Published: 2014-11-06T15:55:10.85+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 7.38%

Last modified Jun 17, 2026

CVE-2014-8655 is a vulnerability of currently unknown severity. The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, (2) DocsisConfigFile.xml, or (3) CmgwBasicSetup.xml in xml/ or (4) basicDDNS.html, (5) basicLanUsers.html, or (6) rootDesc.xml.. EPSS estimates a 7.38% chance of exploitation in the next 30 days.

Description

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, (2) DocsisConfigFile.xml, or (3) CmgwBasicSetup.xml in xml/ or (4) basicDDNS.html, (5) basicLanUsers.html, or (6) rootDesc.xml.

Metrics

EPSS Probability

7.38%

93.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Compal Broadband Networks	Firmware	ch6640-3.5.11.7-nosh
Compal Broadband Networks	Cg6640e Wireless Gateway	1.0
Compal Broadband Networks	Ch664oe Wireless Gateway	1.0

References

Timeline

Published: Nov 6, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-8655?

How severe is CVE-2014-8655?

Severity scoring for CVE-2014-8655 is pending analysis. The EPSS model estimates a 7.38% probability of exploitation in the next 30 days.

How do I fix CVE-2014-8655?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-8655?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST