CVE-2014-8244
published 2014-11-01CVE-2014-8244: Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200…
high7.5CVSS 3.1
AVNACLAuNCPIPAP
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linksys | e4200v2_firmware | <= 2.0.14212.1 | — |
| linksys | ea2700_firmware | <= 2.0.14294 | — |
| linksys | ea3500_firmware | <= 2.0.14294 | — |
| linksys | ea4500_firmware | <= 2.0.14212.1 | — |
| linksys | ea6200_firmware | <= 1.1.41 | — |
| linksys | ea6300_firmware | <= 1.1.40 | — |
| linksys | ea6400_firmware | <= 1.1.40 | — |
| linksys | ea6500_firmware | <= 1.1.40 | — |
| linksys | ea6700_firmware | <= 1.1.40 | — |
| linksys | ea6900_firmware | <= 1.1.42 | — |
CVSS provenance
nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vulncheck7.5HIGH