CVEvulnerability

CVE-2014-8244

7.5 HIGH Published 2014-11-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-200

Description

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

Affected configurations

• linksys ea3500 firmware (<= 2.0.14294) • linksys ea3500 • linksys ea6700 firmware (<= 1.1.40) • linksys ea6700 • linksys ea6500 firmware (<= 1.1.40) • linksys ea6500 • linksys ea4500 firmware (<= 2.0.14212.1) • linksys ea4500 • linksys ea6900 firmware (<= 1.1.42) • linksys ea6900 • linksys ea2700 firmware (<= 2.0.14294) • linksys ea2700 • linksys ea6400 firmware (<= 1.1.40) • linksys ea6400 • linksys ea6200 firmware (<= 1.1.41) • linksys ea6200 • linksys ea6300 firmware (<= 1.1.40) • linksys ea6300 • linksys e4200v2 firmware (<= 2.0.14212.1) • linksys e4200v2

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References