CVE-2013-10062: Linksys Routers apply.cgi Path Traversal
A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the nextpage POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-10062?
CVE-2013-10062 is classified as a high severity vulnerability due to its potential for unauthorized file access on affected Linksys routers.
How do I fix CVE-2013-10062?
To mitigate CVE-2013-10062, update the firmware of your Linksys E1500 router to the latest version provided by the manufacturer.
What are the affected models for CVE-2013-10062?
CVE-2013-10062 specifically affects the Linksys E1500 router with firmware versions 1.0.00, 1.0.04, and 1.0.05.
What type of vulnerability is CVE-2013-10062?
CVE-2013-10062 is a directory traversal vulnerability that allows authenticated attackers to access arbitrary files on the router.
Can CVE-2013-10062 be exploited remotely?
CVE-2013-10062 requires authentication, meaning that an attacker must have access to the router's interface to exploit this vulnerability.