Lucene search

CertccCVE-2014-8243

HistoryNov 01, 2014 - 10:55 a.m.

CVE-2014-8243

2014-11-0110:55:02

CWE-310

certcc

web.nvd.nist.gov

linksys

smart wifi

firmware

vulnerability

remote attackers

administrator

md5 password hash

security

cve-2014-8243

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

74.8%

JSON

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator’s MD5 password hash via a direct request for the /.htpasswd URI.

Affected configurations

Nvd

Node

linksysea4500_firmwareRange≤2.0.14212.1

AND

linksysea4500Match-

Node

linksysea6500_firmwareRange≤1.1.40153731

AND

linksysea6500Match-

Node

linksysea6400_firmwareRange≤1.1.40153731

AND

linksysea6400Match-

Node

linksyse4200v2_firmwareRange≤2.0.14212.1

AND

linksyse4200v2Match-

Node

linksysea6300_firmwareRange≤1.1.40153731

AND

linksysea6300Match-

Node

linksysea6900_firmwareRange≤1.1.42158863

AND

linksysea6900Match-

Node

linksysea2700_firmwareRange≤2.0.14294

AND

linksysea2700Match-

Node

linksysea3500_firmwareRange≤2.0.14294

AND

linksysea3500Match-

Node

linksysea6200_firmwareRange≤1.1.41153743

AND

linksysea6200Match-

Node

linksysea6700_firmwareRange≤1.1.40153731

AND

linksysea6700Match-

VendorProductVersionCPE
linksysea4500_firmware*cpe:2.3:o:linksys:ea4500_firmware:*:*:*:*:*:*:*:*
linksysea4500-cpe:2.3:h:linksys:ea4500:-:*:*:*:*:*:*:*
linksysea6500_firmware*cpe:2.3:o:linksys:ea6500_firmware:*:153731:*:*:*:*:*:*
linksysea6500-cpe:2.3:h:linksys:ea6500:-:*:*:*:*:*:*:*
linksysea6400_firmware*cpe:2.3:o:linksys:ea6400_firmware:*:153731:*:*:*:*:*:*
linksysea6400-cpe:2.3:h:linksys:ea6400:-:*:*:*:*:*:*:*
linksyse4200v2_firmware*cpe:2.3:o:linksys:e4200v2_firmware:*:*:*:*:*:*:*:*
linksyse4200v2-cpe:2.3:h:linksys:e4200v2:-:*:*:*:*:*:*:*
linksysea6300_firmware*cpe:2.3:o:linksys:ea6300_firmware:*:153731:*:*:*:*:*:*
linksysea6300-cpe:2.3:h:linksys:ea6300:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linksys	ea4500_firmware	*	cpe:2.3:o:linksys:ea4500_firmware::::::::
linksys	ea4500	-	cpe:2.3:h:linksys:ea4500:-:::::::*
linksys	ea6500_firmware	*	cpe:2.3:o:linksys:ea6500_firmware::153731::::::*
linksys	ea6500	-	cpe:2.3:h:linksys:ea6500:-:::::::*
linksys	ea6400_firmware	*	cpe:2.3:o:linksys:ea6400_firmware::153731::::::*
linksys	ea6400	-	cpe:2.3:h:linksys:ea6400:-:::::::*
linksys	e4200v2_firmware	*	cpe:2.3:o:linksys:e4200v2_firmware::::::::
linksys	e4200v2	-	cpe:2.3:h:linksys:e4200v2:-:::::::*
linksys	ea6300_firmware	*	cpe:2.3:o:linksys:ea6300_firmware::153731::::::*
linksys	ea6300	-	cpe:2.3:h:linksys:ea6300:-:::::::*

Rows per page:

1-10 of 201

References

www.kb.cert.org/vuls/id/447516

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.004

Percentile

74.8%

JSON

Related for CVE-2014-8243