CVE-2014-9222: Allegrosoft Rompager

High severity, CVSS 10.0. EPSS: 63.7% chance of exploitation in the next 30 days.

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

Affected products

• Allegrosoft Rompager: up to and including 4.07

Published 2014-12-24. Last modified 2026-06-17.