Unscored severity · published Sep 29, 2014
CVE-2013-3065
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Ea6500 · Linksys
All versions, or not specified · source: NVD
EF
Ea6500 Firmware · Linksys
1.1.28.147876 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3065
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3065
Exploit
http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
Exploit
http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
More from Ea6500
–
CVE-2014-8244
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40…
–
CVE-2014-8243
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40…
–
CVE-2013-3066
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via…
–
CVE-2013-3064
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct…