CVE-2014-8243 - CVE House
Back to Database
Status published Low CVE-2014-8243

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before...

Vulnerability Description

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8243

Credits & Attribution

No credits recorded in the NVD database.

References

More from linksys

View All →
CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown 0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical 9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High 7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium 4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High 7.5

Affected Vendor

Affected Software

ea4500 firmware, ea4500, ea6500 firmware, ea6500, ea6400 firmware, ea6400, e4200v2 firmware, e4200v2, ea6300 firmware, ea6300, ea6900 firmware, ea6900, ea2700 firmware, ea2700, ea3500 firmware, ea3500, ea6200 firmware, ea6200, ea6700 firmware, ea6700
Vulnerable Versions:
0

Timeline

Official Publish: November 1st, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.