PT-2020-7414 · Cisco · Cisco Linksys E4200

Published 2020-02-05 · Updated 2020-02-07 · CVE-2013-2680

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Linksys E4200 version 1.0.05 Build 7

Description: The issue allows remote attackers to obtain sensitive information because passwords are stored in cleartext.

Recommendations: For Cisco Linksys E4200 version 1.0.05 Build 7, consider changing the password storage mechanism to a more secure method, such as hashing, to prevent cleartext password exposure. As a temporary workaround, restrict remote access to the device until a more secure storage method is implemented.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2013-2680

Affected Products

Cisco Linksys E4200

References · 6

• 🔥 https://exploit-db.com/exploits/25292 · Exploit
• 🔥 http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2680 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84073 · Note
• https://t.me/cvenotify/813 · Telegram Post
• http://securityfocus.com/bid/59712 · Note