Looking Glass · Multi-Router Looking Glass (MRLG)

CVE-2014-3931

Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

Exploited in attacks Critical 9.8 Attack chance: 29%

What it is

fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.

CISA: Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption.

What to do

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Deadline for US federal agencies: July 28, 2025

Added to the CISA list: July 7, 2025
Published: March 31, 2017
Severity: Critical 9.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 29% in the top 1.9% of all known vulnerabilities
Weakness: CWE-119
More details: NVD · CVE.org · CISA

All references (3)

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.