Unscored severity · published Sep 29, 2014
CVE-2013-3066
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Ea6500 · Linksys
All versions, or not specified · source: NVD
EF
Ea6500 Firmware · Linksys
1.1.28.147876 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3066
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3066
Exploit
http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
Exploit
http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
More from Ea6500
–
CVE-2014-8244
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40…
–
CVE-2014-8243
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40…
–
CVE-2013-3065
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web…
–
CVE-2013-3064
Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct…