CVE-2014-3150 Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.
HighCVSS 8.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| orange livebox 1.1 firmware | = 26014a | No fix listed |
References
- archive.fo third-party-advisory