Vulnerability Description
lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lg Project | Lg | 1.01 |
Related Weaknesses (CWE)
References
- http://www.s3.eurecom.fr/cve/CVE-2014-3930.txtThird Party Advisory
- https://hackerone.com/reports/16330Third Party Advisory
- http://www.s3.eurecom.fr/cve/CVE-2014-3930.txtThird Party Advisory
- https://hackerone.com/reports/16330Third Party Advisory
FAQ
What is CVE-2014-3930?
CVE-2014-3930 is a vulnerability with a CVSS score of 7.5 (HIGH). lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credential...
How severe is CVE-2014-3930?
CVE-2014-3930 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3930?
Check the references section above for vendor advisories and patch information. Affected products include: Lg Project Lg.