- Description
- LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:linksys:befsr41:1.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A52F18C5-6D00-493C-B38F-D6695670357F"
},
{
"criteria": "cpe:2.3:h:linksys:befsr41:1.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F7E417D-3751-4FCF-AECC-7601F77198E9"
},
{
"criteria": "cpe:2.3:h:linksys:befsr41:1.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127E79AF-33BE-485E-B4A3-058ECC898E9F"
},
{
"criteria": "cpe:2.3:h:linksys:befsr41:1.38.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B49FC600-D1E3-4233-AC8A-DBFA87D2138D"
}
],
"operator": "OR"
}
]
}
]