high8.1Public exploit code
CVE-2013-2678
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linksys E1500/E2500 - Multiple Vulnerabilities2013-02-11 · webapps · hardware · Verified
- Cisco Linksys E4200 - Multiple Vulnerabilities2013-05-07 · webapps · hardware
- Linksys WRT160N - Multiple Vulnerabilities2013-02-11 · webapps · hardware
Impact
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Linksys E4200 Firmware | Version 1.0.05 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
- http://www.exploit-db.com/exploits/25292
- http://www.securityfocus.com/bid/59710
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84072
- http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
- http://www.exploit-db.com/exploits/25292
- http://www.securityfocus.com/bid/59710
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84072