What’s Vulnerable › Vulnerabilities

CVE-2013-3066

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-09-29 · updated 2026-06-16
• Weakness: CWE-264

Description

Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/.

Affected products

• Linksys Ea6500: all versions
• Linksys Ea6500 Firmware: 1.1.28.147876

References

• http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
• http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
• http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
• http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php

Get alerted when CVE-2013-3066 or the next vulnerability affects your stack