CVE-2013-2678

CVE Database · CVE-2013-2678

CVE-2013-2678

· HIGHModified

CVSS v3.1

8.1

EPSS

16.48%

Published

Feb 4, 2020

Modified

Nov 20, 2024

Public PoC / Exploit (4)

All weaponized →

Exploit-DBCisco Linksys E4200 - Multiple Vulnerabilities Exploit-DBLinksys E1500/E2500 - Multiple Vulnerabilities Exploit-DBLinksys WRT160N - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-74

Affected Products (2)

cisco · linksys_e4200_firmwarevulnerable

cisco · linksys_e4200

References (8)

http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html

ExploitThird Party AdvisoryVDB Entry

http://www.exploit-db.com/exploits/25292

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/59710

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/84072

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html

KEV Catalog EPSS Scores Vendors All CVEs