PT-2014-7851 · Lg Electronics · Mobile Wifi Router

Taiga Asano · Published 2014-12-05 · Updated 2015-10-28 · CVE-2014-7243

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LG Electronics Mobile WiFi router versions L-09C, L-03E, and L-04D

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors due to a lack of access restriction to the web administration interface.

Recommendations For versions L-09C, L-03E, and L-04D, restrict access to the web administration interface to minimize the risk of exploitation. As a temporary workaround, consider limiting remote access to the router's administration interface until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-7243

Affected Products

Mobile Wifi Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-7243 · Security Note
• http://jvn.jp/en/jp/JVN71762315/index.html · Note
• http://jvn.jp/en/jp/JVN71762315/995312/index.html · Note
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000140.html · Note