CVE-2014-8243
01.11.2014, 10:55
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.Enginsight
| Vendor | Product | Version |
|---|---|---|
| linksys | ea4500_firmware | 𝑥 ≤ 2.0.14212.1 |
| linksys | ea4500 | - |
| linksys | ea6500_firmware | 𝑥 ≤ 1.1.40 |
| linksys | ea6500 | - |
| linksys | ea6400_firmware | 𝑥 ≤ 1.1.40 |
| linksys | ea6400 | - |
| linksys | e4200v2_firmware | 𝑥 ≤ 2.0.14212.1 |
| linksys | e4200v2 | - |
| linksys | ea6300_firmware | 𝑥 ≤ 1.1.40 |
| linksys | ea6300 | - |
| linksys | ea6900_firmware | 𝑥 ≤ 1.1.42 |
| linksys | ea6900 | - |
| linksys | ea2700_firmware | 𝑥 ≤ 2.0.14294 |
| linksys | ea2700 | - |
| linksys | ea3500_firmware | 𝑥 ≤ 2.0.14294 |
| linksys | ea3500 | - |
| linksys | ea6200_firmware | 𝑥 ≤ 1.1.41 |
| linksys | ea6200 | - |
| linksys | ea6700_firmware | 𝑥 ≤ 1.1.40 |
| linksys | ea6700 | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration