Multiple Linksys EA Series vro Password Management Vulnerability (CVE-2014-8243)

Multiple Linksys EA Series vro Password Management Vulnerability (CVE-2014-8243)

Release date:
Updated on:

Affected Systems:
Linksys EA Series router EA6900
Linksys EA Series router EA6700
Linksys EA Series router EA6500
Linksys EA Series router EA6400
Linksys EA Series router EA6300
Linksys EA Series router EA6200
Linksys EA Series routers EA4500
Description:
Bugtraq id: 70860
CVE (CAN) ID: CVE-2014-8243

Linksys is a Cisco department that sells network products for household and small businesses.

Multiple Linksys EA Series routers have password management errors. Unauthenticated attackers on the local network request http (s): // <router_ip> /. htpasswd, which can read from the router. htpassword file, which contains the MD5 hash of the administrator password.

<* Source: Kyle Lovett

Link: http://www.kb.cert.org/vuls/id/447516
*>

Suggestion:
Vendor patch:

Linksys
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.linksys.com

Http://support.linksys.com/en-us/support/routers/E4200
Http://support.linksys.com/en-us/support/routers/EA4500
Http://support.linksys.com/en-us/support/routers/EA6200
Http://support.linksys.com/en-us/support/routers/EA6300
Http://support.linksys.com/en-us/support/routers/EA6400
Http://support.linksys.com/en-us/support/routers/EA6500
Http://support.linksys.com/en-us/support/routers/EA6700
Http://support.linksys.com/en-us/support/routers/EA6900
Http://cwe.mitre.org/data/definitions/310.html
Http://cwe.mitre.org/data/definitions/200.html

This article permanently updates the link address: