CVE-2014-3930: lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls,...

Security readout for executives and security teams

CVE-2014-3930 describes Cistron-LG 1.01 exposing sensitive router-related information from web-accessible storage. A remote attacker may be able to obtain IP addresses and unspecified router credentials. The public bundle does not provide CVSS, confirmed affected deployment details, patch status, or active exploitation evidence. Likely exposure is limited to organizations still running Cistron-LG 1.01 with lg.pl or its generated sensitive data reachable through a web server. The bundle does not identify CPEs, vendors, operating environments, or whether default installations are affected. Treat as an exposure-management issue unless your environment still runs this software on a reachable web server. If present, prioritize containment and credential rotation because the potential impact is credential disclosure, even though public severity and exploitation evidence are incomplete. Mitigation focus: Check Cistron-LG maintainer or vendor guidance for fixed versions or replacement advice.; Restrict public web access to lg.pl and any generated sensitive files.; Remove sensitive data from web-accessible directories where operationally safe..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.