CVE-2014-8243

CVE-2014-8243 affects Linksys SMART Wi‑Fi firmware on EA2700/EA3500 and other models; a remote, unauthenticated attacker can read the administrator’s MD5 password hash by requesting /.htpasswd. Affected firmware versions include 2.1.41/1.1.41/1.1.40/1.1.42 build variants across E4200v2, EA4500, E...

CVE-2014-8244

CVE-2014-8244 affects Linksys SMART Wi‑Fi firmware on EA2700 and EA3500 (and related models) where a remote, unauthenticated attacker can read or modify data by sending crafted JNAP/ HTTP POST requests to the router. Versions before the listed fixes are vulnerable: EA2700/EA3500 (before 2.1.41 bu...

CVE-2013-3065

Summary: CVE-2013-3065 is an XSS vulnerability in the Parental Controls section of Linksys EA6500 firmware 1.1.28.147876. The issue is exploitable by remote authenticated users via the Blocked Specific Sites UI, enabling injection of arbitrary script/HTML. The connected records confirm the affect...

CVE-2013-3064

CVE-2013-3064 describes an open redirect vulnerability in the Linksys EA6500 web UI, specifically in the page UI/dynamic/unsecured.html. With firmware 1.1.28.147876, remote attackers can trick users into visiting arbitrary sites by supplying the malicious URL in the target parameter, enabling phi...

CVE-2013-3066

The vulnerability CVE-2013-3066 affects Linksys EA6500 routers with firmware 1.1.28.147876. The issue is improper access restriction exposing sensitive information (clients and router configuration) through requests to /JNAP/. The CVE details from NVD describe a network-accessible flaw with high ...