Read the docs
TI-2014-04049 Aliases CVE-2014-4927GHSA-rfw9-259h-m9m6

Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear…

Priority MEDIUM 47CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long string in the URI in a GET request.

Why it matters now

EPSS 0.11195 95th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:acme:micro_httpd:-:*:*:*:*:*:*:*not specified by NVDVulnerableACME
cpe:2.3:h:dlink:dsl2740u:-:*:*:*:*:*:*:*not specified by NVDVulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dsl2750u:-:*:*:*:*:*:*:*not specified by NVDVulnerableD-Link Japan K.K.
cpe:2.3:h:netgear:mr-adsl-dg834:-:*:*:*:*:*:*:*not specified by NVDVulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v1:*:*:*:*:*:*:*v1VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v2:*:*:*:*:*:*:*v2VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v3:*:*:*:*:*:*:*v3VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v4:*:*:*:*:*:*:*v4VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v5:*:*:*:*:*:*:*v5VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v6:*:*:*:*:*:*:*v6VulnerableNETGEAR
  • cpe:2.3:a:acme:micro_httpd:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·ACME
  • cpe:2.3:h:dlink:dsl2740u:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dsl2750u:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:netgear:mr-adsl-dg834:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v1:*:*:*:*:*:*:* Versions v1 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v2:*:*:*:*:*:*:* Versions v2 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v3:*:*:*:*:*:*:* Versions v3 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v4:*:*:*:*:*:*:* Versions v4 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v5:*:*:*:*:*:*:* Versions v5 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v6:*:*:*:*:*:*:* Versions v6 Vulnerable ·NETGEAR
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:netgear:wgr614:v7:*:*:*:*:*:*:*v7VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v8:*:*:*:*:*:*:*v8VulnerableNETGEAR
cpe:2.3:h:netgear:wgr614:v9:*:*:*:*:*:*:*v9VulnerableNETGEAR
  • cpe:2.3:h:netgear:wgr614:v7:*:*:*:*:*:*:* Versions v7 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v8:*:*:*:*:*:*:* Versions v8 Vulnerable ·NETGEAR
  • cpe:2.3:h:netgear:wgr614:v9:*:*:*:*:*:*:* Versions v9 Vulnerable ·NETGEAR

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-4927
  2. 2026-10-03 Alias added: GHSA-rfw9-259h-m9m6

References

Exploit 2

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences