CVE-2014-8244: linksys e4200v2_firmware
Vulnerability summary
CVE-2014-8244 is a high (CVSS 7.5) vulnerability in linksys e4200v2_firmware. EPSS estimates a 4.01% chance of exploitation in the next 30 days, higher than 90.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 01-11-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.01%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
+0.03 pp
From 3.98% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (kb.cert.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Linksys10 products
- e4200v2_firmware≤ 2.0.14212.1 | na
- ea2700_firmware≤ 2.0.14294 | na
- ea3500_firmware≤ 2.0.14294 | na
- ea4500_firmware≤ 2.0.14212.1 | na
- ea6200_firmware≤ 1.1.41 | na
1 vendor · 10 products
References
1 links- www.kb.cert.org/vuls/id/447516Third Party AdvisoryX Refsource CERT VNExploitPatchUS Government Resource