CVE-2014-0659

CVE-2014-0659 describes a critical vulnerability in several Cisco small business routers and access points, including the WAP4410N, WRVS4400N, and RVS4000. This flaw allows unauthenticated remote attackers to read sensitive credential and configuration data, and execute arbitrary commands, by sending requests to a hidden "test interface" on TCP port 32764. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication or complex attack techniques, and granting full compromise (confidentiality, integrity, and availability). While not listed on CISA's KEV catalog, exploit modules are publicly available in Metasploit, indicating a high potential for exploitation, though there is no evidence of active exploitation or significant community discussion.