Cisco Linksys E4200 Firmware vulnerabilities

CVE-2013-2678 [HIGH] CWE-74 CVE-2013-2678: Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could al Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

CVE-2013-2681 [CRITICAL] CWE-287 CVE-2013-2681: Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access.

CVE-2013-2680 [HIGH] CWE-312 CVE-2013-2680: Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information.

CVE-2013-2683 [MEDIUM] CWE-200 CVE-2013-2683: Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which all Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information.

CVE-2013-5122 [CRITICAL] CWE-287 CVE-2013-5122: Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open whic Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access

CVE-2013-2684 [MEDIUM] CWE-79 CVE-2013-2684: Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2013-2682 [MEDIUM] CWE-1021 CVE-2013-2682: Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain sensitive information.