CVE-2013-2678

Опубликовано: 04 фев. 2020

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Высокий

Описание

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

Ссылки

http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/25292
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/59710
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/84072
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/25292
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/59710
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/84072
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cisco:linksys_e4200_firmware:1.0.05:*:*:*:*:*:*:*

cpe:2.3:h:cisco:linksys_e4200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.71301

Высокий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-74

Связанные уязвимости

GHSA-55f9-hxq3-grcx

github

почти 4 года назад