CVE-2014-8243: Low severity cisco linksys ea4500 firmware vulnerability
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8243?
CVE-2014-8243 is considered a high severity vulnerability that allows unauthorized remote access.
How do I fix CVE-2014-8243?
To fix CVE-2014-8243, update the firmware on affected Linksys devices to the latest version as specified by the vendor.
Which devices are affected by CVE-2014-8243?
CVE-2014-8243 affects various Linksys SMART WiFi devices, including EA2700, EA3500, EA4500, EA6200, EA6300, EA6400, EA6500, EA6700, and EA6900.
Can CVE-2014-8243 be exploited remotely?
Yes, CVE-2014-8243 can be exploited remotely without authentication, allowing an attacker to gain access to the device.
What versions of Linksys firmware are vulnerable to CVE-2014-8243?
The vulnerable firmware versions for CVE-2014-8243 range before specified builds, including various numbers from 1.1.40 to 2.1.41 depending on the model.