CVE-2014-3931

Description

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.

Scoring

• CVSS: 9.8 (CRITICAL, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2025-07-07
• Remediation due date: 2025-07-28
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-119
• CWE-119

References

• http://mrlg.op-sec.us/
• http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt
• https://hackerone.com/reports/16330
• http://mrlg.op-sec.us/
• http://www.s3.eurecom.fr/cve/CVE-2014-3931.txt
• https://hackerone.com/reports/16330
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-3931

More from Looking Glass

• No other tracked CVEs for this vendor yet.