CVE-2013-3064

Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2014-09-29

Last modified

2024-08-06

Affected products

• Ea6500 (Linksys)
• Ea6500 Firmware (Linksys)

References

• http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf
• http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php