CVE-2014-3150: Orange Livebox 1.1 Firmware

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Livebox 1.1 allows remote authenticated users to upload arbitrary configuration files, download the configuration file, or obtain sensitive information via crafted Javascript.

Affected products

• Orange Livebox 1.1 Firmware: version 26014a only

Published 2017-11-15. Last modified 2026-06-17.