CVE-2014-3931criticalunder attackCWE-119

CVE-2014-3931

Published · Updated

Follow this CVE+ Monitor Multi-Router Looking Glass

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 29%
from disclosure to weapon
Published on NVDMar 31
CISA KEV+3020d
Action required by CISAfederal deadline: 2025-07-28

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A vulnerability in MRLG's fastping.c allows remote attackers to write data to arbitrary memory locations, causing the application to crash or potentially execute malicious code. This is a critical flaw because it requires no authentication and can be exploited over the network.

Technical detail

CWE-119 buffer overflow in fastping.c enables remote unauthenticated attackers to write to arbitrary memory addresses, leading to memory corruption and potential code execution. The attack vector is network-based with no prerequisites, resulting in high severity due to the ability to compromise system integrity and availability.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a