Multiple Linksys EA Series Router Information Leakage Vulnerability (CVE-2014-8244)

Multiple Linksys EA Series Router Information Leakage Vulnerability (CVE-2014-8244)

Release date:
Updated on:

Affected Systems:
Linksys EA Series router EA6900
Linksys EA Series router EA6700
Linksys EA Series router EA6500
Linksys EA Series router EA6400
Linksys EA Series router EA6300
Linksys EA Series router EA6200
Linksys EA Series routers EA4500
Description:
Bugtraq id: 70864
CVE (CAN) ID: CVE-2014-8244

Linksys is a Cisco department that sells network products for household and small businesses.

Multiple Linksys EA Series routers have the information leakage vulnerability. Unauthenticated attackers on the network send constructed http post requests to http (s): // <router_ip>/JNAP /, attackers can send multiple JNAP calls. Based on the called JNAP operation, attackers can read or modify the sensitive information of the vro. At the same time, port 100080 and port 52000 expose management Web interfaces to WAN users.

<* Source: Kyle Lovett

Link: http://www.kb.cert.org/vuls/id/447516
*>

Suggestion:
Vendor patch:

Linksys
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.linksys.com

Http://support.linksys.com/en-us/support/routers/E4200
Http://support.linksys.com/en-us/support/routers/EA4500
Http://support.linksys.com/en-us/support/routers/EA6200
Http://support.linksys.com/en-us/support/routers/EA6300
Http://support.linksys.com/en-us/support/routers/EA6400
Http://support.linksys.com/en-us/support/routers/EA6500
Http://support.linksys.com/en-us/support/routers/EA6700
Http://support.linksys.com/en-us/support/routers/EA6900
Http://cwe.mitre.org/data/definitions/310.html
Http://cwe.mitre.org/data/definitions/200.html

This article permanently updates the link address: