Vulnerability in Linksys E4200v2

CVE-2014-8243

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.

Affected products

Linksys E4200v2
Linksys E4200v2_firmware
Linksys Ea2700
Linksys Ea2700_firmware
Linksys Ea3500
Linksys Ea3500_firmware
Linksys Ea4500
Linksys Ea4500_firmware
Linksys Ea6200
Linksys Ea6200_firmware

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Exploit, Patch, Third Party Advisory, third-party-advisory)