GCVE - cpe:2.3:h:linksys:ea6500:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:linksys:ea6500:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Linksys (`6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2`)
Product	Ea6500 (`caadfd95-7d1b-508a-9235-81b8ee2dcdfb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8244`	vulnerable	2026-06-08 05:06:08.315257	Details available Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request. Published: 2014-11-01T10:00:00.000Z Updated: 2024-08-06T13:10:51.252Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/447516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8243`	vulnerable	2026-06-08 05:06:08.304708	Details available Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain the administrator's MD5 password hash via a direct request for the /.htpasswd URI. Published: 2014-11-01T10:00:00.000Z Updated: 2024-08-06T13:10:50.927Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/447516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4658`	not_vulnerable	2026-06-08 05:04:49.012408	Details available Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share. Published: 2019-10-25T16:10:15.000Z Updated: 2024-08-06T16:52:27.006Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3066`	vulnerable	2026-06-08 05:04:30.051479	Details available Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/. Published: 2014-09-29T22:00:00.000Z Updated: 2024-08-06T16:00:09.445Z Open on db.gcve.eu Reference links http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3065`	vulnerable	2026-06-08 05:04:30.051045	Details available Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section. Published: 2014-09-29T22:00:00.000Z Updated: 2024-08-06T16:00:09.890Z Open on db.gcve.eu Reference links http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3064`	vulnerable	2026-06-08 05:04:30.050518	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.