CVE-2014-9222

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors...

10.0 HighPublic exploit

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.

Exploit likelihood

74.0%Up 2.8 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2014-9222
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-17
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-9222
Updated: 2026-11-02

EUVDEUVD-2014-9047 No score

Record: EUVD-2014-9047
Updated: 2026-11-03

GitHub AdvisoriesGHSA-528r-899g-3h95 No score

AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors...

Record: GHSA-528r-899g-3h95
Updated: 2026-11-02

Affected products

allegrosoft rompager

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Allegro Software RomPager 'Misfortune Cookie' (CVE-2014-9222) Authentication Bypass	2014-12-17
Metasploit	Allegro Software RomPager 'Misfortune Cookie' (CVE-2014-9222) Scanner	2014-12-17
PoC in GitHub	donfanning/MIPS-CVE-2014-9222	2019-08-14
PoC in GitHub	luel-4013/misfortune-cookie	2026-09-07
PoC in GitHub	mercul1ninna/MIPS-CVE-2014-9222	2022-07-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-9222 is a high vulnerability (CVSS 10.0) in Allegrosoft Rompager, published December 24, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 74.0%, the 99th percentile. No source names a fixed version.