Vulnerability Description
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linksys | Ea3500 Firmware | <= 2.0.14294 |
| Linksys | Ea3500 | - |
| Linksys | Ea6700 Firmware | <= 1.1.40 |
| Linksys | Ea6700 | - |
| Linksys | Ea6500 Firmware | <= 1.1.40 |
| Linksys | Ea6500 | - |
| Linksys | Ea4500 Firmware | <= 2.0.14212.1 |
| Linksys | Ea4500 | - |
| Linksys | Ea6900 Firmware | <= 1.1.42 |
| Linksys | Ea6900 | - |
| Linksys | Ea2700 Firmware | <= 2.0.14294 |
| Linksys | Ea2700 | - |
| Linksys | Ea6400 Firmware | <= 1.1.40 |
| Linksys | Ea6400 | - |
| Linksys | Ea6200 Firmware | <= 1.1.41 |
| Linksys | Ea6200 | - |
| Linksys | Ea6300 Firmware | <= 1.1.40 |
| Linksys | Ea6300 | - |
| Linksys | E4200V2 Firmware | <= 2.0.14212.1 |
| Linksys | E4200V2 | - |
Related Weaknesses (CWE)
References
- http://www.kb.cert.org/vuls/id/447516ExploitPatchThird Party Advisory
- http://www.kb.cert.org/vuls/id/447516ExploitPatchThird Party Advisory
FAQ
What is CVE-2014-8244?
CVE-2014-8244 is a vulnerability with a CVSS score of 7.5 (HIGH). Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, ...
How severe is CVE-2014-8244?
CVE-2014-8244 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8244?
Check the references section above for vendor advisories and patch information. Affected products include: Linksys Ea3500 Firmware, Linksys Ea3500, Linksys Ea6700 Firmware, Linksys Ea6700, Linksys Ea6500 Firmware.