CVE-2013-2678 in WRT160N

Summary

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

Once again VulDB remains the best source for vulnerability data.

Reservation

03/22/2013

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
7697	Linksys WRT160N apply.cgi information disclosure	200	Proof-of-Concept	Not defined	CVE-2013-2678
7696	Linksys WRT160N apply.cgi memory corruption	119	Proof-of-Concept	Not defined	CVE-2013-2678
7695	Linksys WRT160N Parameter apply.cgi cross site scripting	80	Proof-of-Concept	Not defined	CVE-2013-2678
7611	Cisco Linksys Password Reset improper authentication	287	Proof-of-Concept	Not defined	CVE-2013-2678
7610	Cisco Linksys apply.cgi cross-site request forgery	352	Proof-of-Concept	Not defined	CVE-2013-2678
7609	Cisco Linksys apply.cgi cross site scripting	80	Proof-of-Concept	Not defined	CVE-2013-2678
7608	Cisco Linksys Router apply.cgi authentication spoofing	290	Proof-of-Concept	Not defined	CVE-2013-2678

Sources

• MITRE
• NVD
• CVE Details