CVE-2013-3066

2014-09-2922:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.2%

JSON

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.

References

securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php

securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf