CVE-2014-8243

CVE-2014-8243 affects Linksys SMART Wi‑Fi firmware on EA2700/EA3500 and other models; a remote, unauthenticated attacker can read the administrator’s MD5 password hash by requesting /.htpasswd. Affected firmware versions include 2.1.41/1.1.41/1.1.40/1.1.42 build variants across E4200v2, EA4500, E...

Linksys SMART WiFi firmware contains multiple vulnerabilities

Overview Linksys EA series routers running the Linksys SMART WiFi firmware contain multiple vulnerabilities. Description CWE-320: Key Management Errors - CVE-2014-8243An remote, unauthenticated attacker can read the router's .htpassword file by requesting https:///.htpasswd. The .htpasswd file...