Lucene search

CertccCVE-2014-8244

HistoryNov 01, 2014 - 10:55 a.m.

CVE-2014-8244

2014-11-0110:55:02

CWE-200

certcc

web.nvd.nist.gov

linksys

smart wifi

firmware

vulnerabilities

remote attack

sensitive information

data modification

nvd

cve-2014-8244

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

79.9%

JSON

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

Affected configurations

Nvd

Node

linksysea3500_firmwareRange≤2.0.14294

AND

linksysea3500Match-

Node

linksysea6700_firmwareRange≤1.1.40153731

AND

linksysea6700Match-

Node

linksysea6500_firmwareRange≤1.1.40153731

AND

linksysea6500Match-

Node

linksysea4500_firmwareRange≤2.0.14212.1

AND

linksysea4500Match-

Node

linksysea6900_firmwareRange≤1.1.42158863

AND

linksysea6900Match-

Node

linksysea2700_firmwareRange≤2.0.14294

AND

linksysea2700Match-

Node

linksysea6400_firmwareRange≤1.1.40153731

AND

linksysea6400Match-

Node

linksysea6200_firmwareRange≤1.1.41153743

AND

linksysea6200Match-

Node

linksysea6300_firmwareRange≤1.1.40153731

AND

linksysea6300Match-

Node

linksyse4200v2_firmwareRange≤2.0.14212.1

AND

linksyse4200v2Match-

VendorProductVersionCPE
linksysea3500_firmware*cpe:2.3:o:linksys:ea3500_firmware:*:*:*:*:*:*:*:*
linksysea3500-cpe:2.3:h:linksys:ea3500:-:*:*:*:*:*:*:*
linksysea6700_firmware*cpe:2.3:o:linksys:ea6700_firmware:*:153731:*:*:*:*:*:*
linksysea6700-cpe:2.3:h:linksys:ea6700:-:*:*:*:*:*:*:*
linksysea6500_firmware*cpe:2.3:o:linksys:ea6500_firmware:*:153731:*:*:*:*:*:*
linksysea6500-cpe:2.3:h:linksys:ea6500:-:*:*:*:*:*:*:*
linksysea4500_firmware*cpe:2.3:o:linksys:ea4500_firmware:*:*:*:*:*:*:*:*
linksysea4500-cpe:2.3:h:linksys:ea4500:-:*:*:*:*:*:*:*
linksysea6900_firmware*cpe:2.3:o:linksys:ea6900_firmware:*:158863:*:*:*:*:*:*
linksysea6900-cpe:2.3:h:linksys:ea6900:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linksys	ea3500_firmware	*	cpe:2.3:o:linksys:ea3500_firmware::::::::
linksys	ea3500	-	cpe:2.3:h:linksys:ea3500:-:::::::*
linksys	ea6700_firmware	*	cpe:2.3:o:linksys:ea6700_firmware::153731::::::*
linksys	ea6700	-	cpe:2.3:h:linksys:ea6700:-:::::::*
linksys	ea6500_firmware	*	cpe:2.3:o:linksys:ea6500_firmware::153731::::::*
linksys	ea6500	-	cpe:2.3:h:linksys:ea6500:-:::::::*
linksys	ea4500_firmware	*	cpe:2.3:o:linksys:ea4500_firmware::::::::
linksys	ea4500	-	cpe:2.3:h:linksys:ea4500:-:::::::*
linksys	ea6900_firmware	*	cpe:2.3:o:linksys:ea6900_firmware::158863::::::*
linksys	ea6900	-	cpe:2.3:h:linksys:ea6900:-:::::::*

Rows per page:

1-10 of 201

References

www.kb.cert.org/vuls/id/447516

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.007

Percentile

79.9%

JSON

Related for CVE-2014-8244