Cisco Linksys e4200 Firmware vulnerabilities

7 CVEs affecting Cisco Linksys e4200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-2684, published 2020-02-06.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-2678, published 2020-02-04. High severity, CVSS 8.1. EPSS: 16.9% chance of exploitation in the next 30 days. Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted…
• CVE-2013-2683, published 2020-02-06. Medium severity, CVSS 5.3. EPSS: 13.4% chance of exploitation in the next 30 days. Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers to obtain private IP addresses and other sensitive information.
• CVE-2013-2681, published 2020-02-05. Critical severity, CVSS 9.8. EPSS: 10.1% chance of exploitation in the next 30 days. Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access.
• CVE-2013-2680, published 2020-02-05. High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days. Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive information.
• CVE-2013-2682, published 2020-02-05. Medium severity, CVSS 4.3. EPSS: 6.3% chance of exploitation in the next 30 days. Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain sensitive information.
• CVE-2013-5122, published 2020-01-07. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
• CVE-2013-2684, published 2020-02-06. Medium severity, CVSS 6.1. EPSS: 3.7% chance of exploitation in the next 30 days. Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.