1. Home
  2. CVE Database
  3. CVE-2014-8243
LOW · 3.3

CVE-2014-8243

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, ...

Vulnerability Description

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

CVSS Score

3.3

LOW

AV:A/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LinksysEa4500 Firmware<= 2.0.14212.1
LinksysEa4500-
LinksysEa6500 Firmware<= 1.1.40
LinksysEa6500-
LinksysEa6400 Firmware<= 1.1.40
LinksysEa6400-
LinksysE4200V2 Firmware<= 2.0.14212.1
LinksysE4200V2-
LinksysEa6300 Firmware<= 1.1.40
LinksysEa6300-
LinksysEa6900 Firmware<= 1.1.42
LinksysEa6900-
LinksysEa2700 Firmware<= 2.0.14294
LinksysEa2700-
LinksysEa3500 Firmware<= 2.0.14294
LinksysEa3500-
LinksysEa6200 Firmware<= 1.1.41
LinksysEa6200-
LinksysEa6700 Firmware<= 1.1.40
LinksysEa6700-

Related Weaknesses (CWE)

CWE-310

References

FAQ

What is CVE-2014-8243?

CVE-2014-8243 is a vulnerability with a CVSS score of 3.3 (LOW). Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, ...

How severe is CVE-2014-8243?

CVE-2014-8243 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-8243?

Check the references section above for vendor advisories and patch information. Affected products include: Linksys Ea4500 Firmware, Linksys Ea4500, Linksys Ea6500 Firmware, Linksys Ea6500, Linksys Ea6400 Firmware.