Linksys Ea6500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Linksys Ea6500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-4658 — CVSS 9.8 (critical): Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.
• CVE-2014-8244 — CVSS 7.5 (high): Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build…
• CVE-2013-3066 — CVSS 7.1 (high): Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information…
• CVE-2013-3064 — CVSS 6.8 (medium): Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect…
• CVE-2013-3065 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote…
• CVE-2014-8243 — CVSS 3.3 (low): Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build…