VulnerabilityModified
CVE-2013-3065
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.
LOW 3.5EPSS 0.78%
Does this matter?
Lower severity and a low EPSS score (0.78%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 0.78% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- linksys/ea6500 firmware · linksys/ea6500
- Source
- cve@mitre.org
References
- http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdfExploit
- http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.phpExploit
- http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdfExploit
- http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.phpExploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.