What is the severity of CVE-2014-8243?

CVE-2014-8243 is considered a high severity vulnerability that allows unauthorized remote access.

How do I fix CVE-2014-8243?

To fix CVE-2014-8243, update the firmware on affected Linksys devices to the latest version as specified by the vendor.

Which devices are affected by CVE-2014-8243?

CVE-2014-8243 affects various Linksys SMART WiFi devices, including EA2700, EA3500, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900.

Can CVE-2014-8243 be exploited remotely?

Yes, CVE-2014-8243 can be exploited remotely without authentication, allowing an attacker to gain access to the device.

What versions of Linksys firmware are vulnerable to CVE-2014-8243?

The vulnerable firmware versions for CVE-2014-8243 range before specified builds, including various numbers from 1.1.40 to 2.1.41 depending on the model.

Vulnerability/
CVE-2014-8243

low

3.3

CWE

310

1/11/2014

6/8/2024

CVE-2014-8243

First published: Sat Nov 01 2014(Updated: )

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Credit: cret@cert.org

Affected Software	Affected Version	How to fix
Linksys Ea4500 Firmware	<=2.0.14212.1
Linksys EA4500
Linksys Ea6500 Firmware	<=1.1.40
Linksys EA6500
Linksys Ea6400 Firmware	<=1.1.40
Linksys Ea6400
Linksys E4200v2 Firmware	<=2.0.14212.1
Linksys E4200v2
Linksys Ea6300 Firmware	<=1.1.40
Linksys Ea6300
Linksys Ea6900 Firmware	<=1.1.42
Linksys Ea6900
Linksys Ea2700 Firmware	<=2.0.14294
Linksys Ea2700
Linksys Ea3500 Firmware	<=2.0.14294
Linksys Ea3500
Linksys Ea6200 Firmware	<=1.1.41
Linksys Ea6200
Linksys Ea6700 Firmware	<=1.1.40
Linksys Ea6700

Remedy

http://www.kb.cert.org/vuls/id/447516

Never miss a vulnerability like this again

Reference Links

http://www.kb.cert.org/vuls/id/447516

Frequently Asked Questions

What is the severity of CVE-2014-8243?
CVE-2014-8243 is considered a high severity vulnerability that allows unauthorized remote access.
How do I fix CVE-2014-8243?
To fix CVE-2014-8243, update the firmware on affected Linksys devices to the latest version as specified by the vendor.
Which devices are affected by CVE-2014-8243?
CVE-2014-8243 affects various Linksys SMART WiFi devices, including EA2700, EA3500, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900.
Can CVE-2014-8243 be exploited remotely?
Yes, CVE-2014-8243 can be exploited remotely without authentication, allowing an attacker to gain access to the device.
What versions of Linksys firmware are vulnerable to CVE-2014-8243?
The vulnerable firmware versions for CVE-2014-8243 range before specified builds, including various numbers from 1.1.40 to 2.1.41 depending on the model.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/remedy
agent/weakness
agent/references
agent/last-modified-date
agent/author
agent/first-publish-date
agent/description
agent/tags
agent/event
agent/source
vendor/linksys
canonical/linksys ea4500 firmware
version/linksys ea4500 firmware/2.0.14212.1
canonical/linksys ea4500
canonical/linksys ea6500 firmware
version/linksys ea6500 firmware/1.1.40
canonical/linksys ea6500
canonical/linksys ea6400 firmware
version/linksys ea6400 firmware/1.1.40
canonical/linksys ea6400
canonical/linksys e4200v2 firmware
version/linksys e4200v2 firmware/2.0.14212.1
canonical/linksys e4200v2
canonical/linksys ea6300 firmware
version/linksys ea6300 firmware/1.1.40
canonical/linksys ea6300
canonical/linksys ea6900 firmware
version/linksys ea6900 firmware/1.1.42
canonical/linksys ea6900
canonical/linksys ea2700 firmware
version/linksys ea2700 firmware/2.0.14294
canonical/linksys ea2700
canonical/linksys ea3500 firmware
version/linksys ea3500 firmware/2.0.14294
canonical/linksys ea3500
canonical/linksys ea6200 firmware
version/linksys ea6200 firmware/1.1.41
canonical/linksys ea6200
canonical/linksys ea6700 firmware
version/linksys ea6700 firmware/1.1.40
canonical/linksys ea6700

Frequently Asked Questions

What is the severity of CVE-2014-8243?
CVE-2014-8243 is considered a high severity vulnerability that allows unauthorized remote access.
How do I fix CVE-2014-8243?
To fix CVE-2014-8243, update the firmware on affected Linksys devices to the latest version as specified by the vendor.
Which devices are affected by CVE-2014-8243?
CVE-2014-8243 affects various Linksys SMART WiFi devices, including EA2700, EA3500, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900.
Can CVE-2014-8243 be exploited remotely?
Yes, CVE-2014-8243 can be exploited remotely without authentication, allowing an attacker to gain access to the device.
What versions of Linksys firmware are vulnerable to CVE-2014-8243?
The vulnerable firmware versions for CVE-2014-8243 range before specified builds, including various numbers from 1.1.40 to 2.1.41 depending on the model.

CVE-2014-8243

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-8243?

How do I fix CVE-2014-8243?

Which devices are affected by CVE-2014-8243?

Can CVE-2014-8243 be exploited remotely?

What versions of Linksys firmware are vulnerable to CVE-2014-8243?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2014-8243?

How do I fix CVE-2014-8243?

Which devices are affected by CVE-2014-8243?

Can CVE-2014-8243 be exploited remotely?

What versions of Linksys firmware are vulnerable to CVE-2014-8243?