CVE-2014-8655

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...

5.0 MediumPublic exploit

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, (2) DocsisConfigFile.xml, or (3) CmgwBasicSetup.xml in xml/ or (4) basicDDNS.html, (5) basicLanUsers.html, or (6) rootDesc.xml.

Exploit likelihood

7.38%Up 6.2 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2014-8655
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-8655
Updated: 2026-11-02

EUVDEUVD-2014-8491 No score

Record: EUVD-2014-8491
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pgh7-f6pc-3535 No score

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640...

Record: GHSA-pgh7-f6pc-3535
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CBN CH6640E/CG6640E Wireless Gateway Series - Multiple Vulnerabilities	2014-10-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8655 is a medium vulnerability (CVSS 5.0) in Compal Broadband Networks Cg6640e Wireless Gateway, published November 6, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.38%, the 94th percentile. No source names a fixed version.