Vulnerability in Linksys Ea6500

CVE-2013-3066

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

Affected products

Linksys Ea6500
Linksys Ea6500_firmware — versions 1.1.28.147876
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)