CVE-2014-9583

Description

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via a NET_CMD_ID_MANU_CMD packet to UDP port 9999. NOTE: this issue was incorrectly mapped to CVE-2014-10000, but that ID is invalid due to its use as an example of the 2014 CVE ID syntax change.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

ASUS infosvr Auth Bypass Command Execution
exploit/linux/misc/asus_infosvr_auth_bypass_exec

Exploit-DB 2

ASUS infosvr - Authentication Bypass Command Execution (Metasploit) EDB-44524 · remote · Apr 24, 2018 · verified
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution EDB-35688 · remote · Jan 4, 2015 · verified

GitHub 1 repository

krevetkqqq/CVE-2014-9583 ★ 0 · Oct 30, 2026

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and o…