CVE-2014-3931
Critical 9.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.
Metrics
- CVSS 3.1
-
9.8 (CRITICAL)
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 29% (percentile: 98) as of 1 November 2026
- CWE
- CWE-119
Affected products
multi-router_looking_glass_project: multi-router looking glass
References
- https://hackerone.com/reports/16330 ExploitThird Party Advisory
- https://hackerone.com/reports/16330 ExploitThird Party Advisory
- http://mrlg.op-sec.us/ Third Party Advisory
- http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt Third Party Advisory
- http://mrlg.op-sec.us/ Third Party Advisory
- http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014… US Government Resource