CVE-2014-8243
Low
Description
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.
SeverityLow
CVSS3.3
Exploit probability—
ProductLinksys Ea4500 Firmware
PublishedNov 1, 2014
First seenNov 1, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linksys ea4500_firmware | v ≤ 2.0.14212.1 | — |
| linksys ea4500 | No range specified | — |
| linksys ea6500_firmware | v ≤ 1.1.40 | — |
| linksys ea6500 | No range specified | — |
| linksys ea6400_firmware | v ≤ 1.1.40 | — |
| linksys ea6400 | No range specified | — |
| linksys e4200v2_firmware | v ≤ 2.0.14212.1 | — |
| linksys e4200v2 | No range specified | — |
| linksys ea6300_firmware | v ≤ 1.1.40 | — |
| linksys ea6300 | No range specified | — |
| linksys ea6900_firmware | v ≤ 1.1.42 | — |
| linksys ea6900 | No range specified | — |
| linksys ea2700_firmware | v ≤ 2.0.14294 | — |
| linksys ea2700 | No range specified | — |
| linksys ea3500_firmware | v ≤ 2.0.14294 | — |
| linksys ea3500 | No range specified | — |
| linksys ea6200_firmware | v ≤ 1.1.41 | — |
| linksys ea6200 | No range specified | — |
| linksys ea6700_firmware | v ≤ 1.1.40 | — |
| linksys ea6700 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.