CVE-2014-8653

Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E...

4.3 MediumPublic exploit

Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to inject arbitrary web script or HTML via the userData cookie.

Exploit likelihood

3.50%Up 2.2 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2014-8653
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8653
Updated: 2026-11-02

EUVDEUVD-2014-8489 No score

Record: EUVD-2014-8489
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7fxh-fwr6-5j8c No score

Cross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E...

Record: GHSA-7fxh-fwr6-5j8c
Weakness: CWE-79
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CBN CH6640E/CG6640E Wireless Gateway Series - Multiple Vulnerabilities	2014-10-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8653 is a medium vulnerability (CVSS 4.3) in Compal Broadband Networks Cg6640e Wireless Gateway, published November 6, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.50%, the 89th percentile. No source names a fixed version.