PT-2014-7851 · Lg Electronics · Mobile Wifi Router

Taiga Asano · Publicado 2014-12-05 · Atualizado 2015-10-28 · CVE-2014-7243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LG Electronics Mobile WiFi router versions L-09C, L-03E, and L-04D

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to a lack of access restriction to the web administration interface.

Recommendations For versions L-09C, L-03E, and L-04D, restrict access to the web administration interface to minimize the risk of exploitation. As a temporary workaround, consider limiting remote access to the router's administration interface until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-7243

Produtos afetados

Mobile Wifi Router

Referências · 4

• http://jvn.jp/en/jp/JVN71762315/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-7243 · Nota de Segurança
• http://jvn.jp/en/jp/JVN71762315/995312/index.html · Nota
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000140.html · Nota