CVE-2014-1982: Alliedtelesis At-RG634A

High severity, CVSS 10.0. EPSS: 9.4% chance of exploitation in the next 30 days.

The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request to cli.html.

Affected products

• Alliedtelesis At-RG634A
• Alliedtelesis At-RG634A Firmware: version 3.3+ only
• Alliedtelesis IMG616LH
• Alliedtelesis IMG616LH Firmware: version +2.4 only
• Alliedtelesis IMG624A
• Alliedtelesis IMG624A Firmware: version 3.5 only
• Alliedtelesis IMG646BD
• Alliedtelesis IMG646BD Firmware: version 3.5 only

Published 2014-03-31. Last modified 2026-06-17.