CVE-2014-8243

EUVD-2014-8084 · Published Nov 1, 2014

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Technologies

Linksys Ea6900Linksys Ea6500 FirmwareLinksys E4200V2Linksys Ea6700 FirmwareLinksys Ea4500Linksys Ea3500Linksys Ea6300 FirmwareLinksys Ea2700 FirmwareLinksys Ea6400 FirmwareLinksys Ea6500Linksys Ea6400Linksys Ea2700Linksys Ea6200Linksys Ea3500 FirmwareLinksys E4200V2 FirmwareLinksys Ea6200 FirmwareLinksys Ea4500 FirmwareLinksys Ea6700Linksys Ea6300Linksys Ea6900 Firmware

Weaknesses

CWE-310

CVSS scores

v2.03.3AV:A/AC:L/Au:N/C:P/I:N/A:N

References

http://www.kb.cert.org/vuls/id/447516

Potentially impacted assets

See if this affects your attack surface