CVE-2014-3150

Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-11-15

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Livebox 1.1 Firmware (Orange)

References

• https://archive.fo/TZQpD