Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.
References
Link | Resource |
---|---|
https://archive.fo/TZQpD | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2017-11-15 10:29
Updated : 2017-12-04 17:01
NVD link : CVE-2014-3150
Mitre link : CVE-2014-3150
JSON object : View
CWE
CWE-254
7PK - Security Features
Products Affected
orange
- livebox_1.1
- livebox_1.1_firmware