AllegroSoft RomPager 4.34 and earlier as used in Huawei Home Gateway products and other vendors and products allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption aka the \Misfortune Cookie\ vulnerability.