Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-8244

Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300, EA6400, EA6500, and EA6700 devices; and before 1.1.42 build 161129 on EA6900 devices allows remote attackers to obtain sensitive information or modify data via a JNAP action in a JNAP/ HTTP request.

Security Impact Summary

CVE-2014-8244 is a security vulnerability that . Impacting 20 products from linksys, from linksys, from linksys and 17 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Documented in 2014, this vulnerability occurred amid the cloud computing expansion era, where traditional network perimeter security models were being reevaluated. Organizations were transitioning from isolated infrastructure to interconnected systems, creating new attack surfaces that vulnerabilities like this could exploit.

Published

2014-11-01T10:55:02.853

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linksys	ea3500_firmware	≤ 2.0.14294	Yes
Hardware	linksys	ea3500	-	Yes
Operating System	linksys	ea6700_firmware	≤ 1.1.40	Yes
Hardware	linksys	ea6700	-	Yes
Operating System	linksys	ea6500_firmware	≤ 1.1.40	Yes
Hardware	linksys	ea6500	-	Yes
Operating System	linksys	ea4500_firmware	≤ 2.0.14212.1	Yes
Hardware	linksys	ea4500	-	Yes
Operating System	linksys	ea6900_firmware	≤ 1.1.42	Yes
Hardware	linksys	ea6900	-	Yes
Operating System	linksys	ea2700_firmware	≤ 2.0.14294	Yes
Hardware	linksys	ea2700	-	Yes
Operating System	linksys	ea6400_firmware	≤ 1.1.40	Yes
Hardware	linksys	ea6400	-	Yes
Operating System	linksys	ea6200_firmware	≤ 1.1.41	Yes
Hardware	linksys	ea6200	-	Yes
Operating System	linksys	ea6300_firmware	≤ 1.1.40	Yes
Hardware	linksys	ea6300	-	Yes
Operating System	linksys	e4200v2_firmware	≤ 2.0.14212.1	Yes
Hardware	linksys	e4200v2	-	Yes

References

http://www.kb.cert.org/vuls/id/447516 Exploit, Patch, Third Party Advisory, US Government Resource ([email protected])
http://www.kb.cert.org/vuls/id/447516 Exploit, Patch, Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For linksys's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.