PT-2017-5861
CVE-2014-3150
·
تاريخ النشر
2017-11-15
·
تاريخ التحديث
2017-12-05
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Livebox version 1.1
Description:
The issue allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.
Recommendations:
For Livebox version 1.1, consider restricting access to configuration files and sensitive information to prevent unauthorized uploads or downloads until a patch is available. As a temporary workaround, consider disabling Javascript execution in the Livebox interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾