Multiple Cisco Linksys Products Security Bypass Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. Multiple Cisco Linksys Products Security Bypass Vulnerability
Summary
Multiple Cisco Linksys products are prone to a security-bypass vulnerability.
Impact
Exploiting this issue could allow an attacker to bypass certain security restrictions and gain unauthorized access to the affected device.
Solution
Updates are available
Insight
The device listens on port 8083 with the same interface as port 80, but completely circumvents HTTP/S authentication granting admin privileges on the device.
Affected
Cisco Linksys EA2700 running firmware 1.0.14 Cisco Linksys EA3500 running firmware 1.0.30 Cisco Linksys E4200 running firmware 2.0.36 Cisco Linksys EA4500 running firmware 2.0.36
Detection
Connect to port 8083 and check the response.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities