What’s Vulnerable › Vulnerabilities

CVE-2014-8243

• Severity: low (CVSS 3.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-11-01 · updated 2026-06-17
• Weakness: CWE-310

Description

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI.

Affected products

• Linksys E4200V2: all versions
• Linksys E4200V2 Firmware: through 2.0.14212.1
• Linksys Ea2700: all versions
• Linksys Ea2700 Firmware: through 2.0.14294
• Linksys Ea3500: all versions
• Linksys Ea3500 Firmware: through 2.0.14294
• Linksys Ea4500: all versions
• Linksys Ea4500 Firmware: through 2.0.14212.1
• Linksys Ea6200: all versions
• Linksys Ea6200 Firmware: through 1.1.41
• Linksys Ea6300: all versions
• Linksys Ea6300 Firmware: through 1.1.40
• Linksys Ea6400: all versions
• Linksys Ea6400 Firmware: through 1.1.40
• Linksys Ea6500: all versions
• Linksys Ea6500 Firmware: through 1.1.40
• Linksys Ea6700: all versions
• Linksys Ea6700 Firmware: through 1.1.40
• Linksys Ea6900: all versions
• Linksys Ea6900 Firmware: through 1.1.42

References

• http://www.kb.cert.org/vuls/id/447516
• http://www.kb.cert.org/vuls/id/447516

Get alerted when CVE-2014-8243 or the next vulnerability affects your stack