Sign-up

ID

VAR-201910-1351


CVE

CVE-2013-4658


TITLE

Belkin Linksys EA6500 Path Traversal Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2019-39948 // CNNVD: CNNVD-201910-1501

DESCRIPTION

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share. Linksys EA6500 Contains a path traversal vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. The Belkin Linksys EA6500 is a wireless router from Belkin. A path traversal vulnerability exists in Linksys EA6500 that is caused by a network system or product that fails to properly filter a particular element in a resource or file path that an attacker could use to access a location outside of a restricted directory

Trust: 2.16

sources: NVD: CVE-2013-4658 // JVNDB: JVNDB-2013-006862 // CNVD: CNVD-2019-39948

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2019-39948

AFFECTED PRODUCTS

vendor:linksysmodel:ea6500scope:eqversion: -

Trust: 2.2

vendor:cisco linksysmodel:ea6500scope: - version: -

Trust: 0.8

vendor:belkinmodel:linksys ea6500scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2019-39948 // JVNDB: JVNDB-2013-006862 // CNNVD: CNNVD-201910-1501 // NVD: CVE-2013-4658

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-4658
value: CRITICAL

Trust: 1.0

NVD: CVE-2013-4658
value: CRITICAL

Trust: 0.8

CNVD: CNVD-2019-39948
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201910-1501
value: CRITICAL

Trust: 0.6

nvd@nist.gov: CVE-2013-4658
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2019-39948
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2013-4658
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2013-4658
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2019-39948 // JVNDB: JVNDB-2013-006862 // CNNVD: CNNVD-201910-1501 // NVD: CVE-2013-4658

PROBLEMTYPE DATA

problemtype:CWE-22

Trust: 1.8

sources: JVNDB: JVNDB-2013-006862 // NVD: CVE-2013-4658

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201910-1501

TYPE

path traversal

Trust: 0.6

sources: CNNVD: CNNVD-201910-1501

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-006862

PATCH
title:Top Pageurl:https://www.linksys.com/us/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2013-006862

EXTERNAL IDS
db:NVDid:CVE-2013-4658
Trust: 3.0
db:JVNDBid:JVNDB-2013-006862
Trust: 0.8
db:CNVDid:CNVD-2019-39948
Trust: 0.6
db:CNNVDid:CNNVD-201910-1501
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2019-39948 // 
            
            
            
            JVNDB: JVNDB-2013-006862 // 
            
            
            
            CNNVD: CNNVD-201910-1501 // 
            
            
            
            NVD: CVE-2013-4658

REFERENCES
url:https://www.ise.io/casestudies/exploiting-soho-routers/
Trust: 2.4
url:https://www.ise.io/soho_service_hacks/
Trust: 2.4
url:https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
Trust: 2.2
url:https://nvd.nist.gov/vuln/detail/cve-2013-4658
Trust: 2.0
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-4658
Trust: 0.8
sources:
            
            
            CNVD: CNVD-2019-39948 // 
            
            
            
            JVNDB: JVNDB-2013-006862 // 
            
            
            
            CNNVD: CNNVD-201910-1501 // 
            
            
            
            NVD: CVE-2013-4658

SOURCES
db:CNVDid:CNVD-2019-39948
db:JVNDBid:JVNDB-2013-006862
db:CNNVDid:CNNVD-201910-1501
db:NVDid:CVE-2013-4658

LAST UPDATE DATE
2024-11-23T22:37:37.114000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2019-39948date:2019-11-11T00:00:00
db:JVNDBid:JVNDB-2013-006862date:2019-11-01T00:00:00
db:CNNVDid:CNNVD-201910-1501date:2019-10-30T00:00:00
db:NVDid:CVE-2013-4658date:2024-11-21T01:56:00.373

SOURCES RELEASE DATE
db:CNVDid:CNVD-2019-39948date:2019-11-11T00:00:00
db:JVNDBid:JVNDB-2013-006862date:2019-11-01T00:00:00
db:CNNVDid:CNNVD-201910-1501date:2019-10-25T00:00:00
db:NVDid:CVE-2013-4658date:2019-10-25T17:15:10.570