CVE:CVE-2014-8244
CNNVD:CNNVD-201411-002
Cisco Linksys SMART WiFi firmware on EA2700和EA3500等是美国思科（Cisco）公司的运行于EA系列路由器中的固件。
Cisco Linksys SMART WiFi固件中存在安全漏洞。远程攻击者可借助JNAP/ HTTP请求上的JNAP操作利用该漏洞获取敏感信息或修改数据。以下版本受到影响：EA2700和EA3500设备上的Linksys SMART WiFi固件，E4200v2和EA4500设备上的Linksys SMART WiFi固件2.1.41 build 162351之前版本，EA6200设备上的Linksys SMART WiFi固件1.1.41 build 162599之前版本，EA6300、EA6400、EA6500和EA6700设备上的Linksys SMART WiFi固件1.1.40 build 160989之前版本，EA6900设备上的Linksys SMART WiFi固件1.1.42 build 161129之前版本。
solution:Upgrade linksys ea3500_firmware to a higher version than 2.0.14294,and avoid the version (,2.0.14294]; Upgrade linksys ea3500 to a higher version than -; Upgrade linksys ea6700_firmware to a higher version than *:153731,and avoid the version *:153731; Upgrade linksys ea6700 to a higher version than -; Upgrade linksys ea6500_firmware to a higher version than *:153731,and avoid the version *:153731; Upgrade linksys ea6500 to a higher version than -; Upgrade linksys ea4500_firmware to a higher version than 2.0.14212.1,and avoid the version (,2.0.14212.1]; Upgrade linksys ea4500 to a higher version than -; Upgrade linksys ea6900_firmware to a higher version than *:158863,and avoid the version *:158863; Upgrade linksys ea6900 to a higher version than -; Upgrade linksys ea2700_firmware to a higher version than 2.0.14294,and avoid the version (,2.0.14294]; Upgrade linksys ea2700 to a higher version than -; Upgrade linksys ea6400_firmware to a higher version than *:153731,and avoid the version *:153731; Upgrade linksys ea6400 to a higher version than -; Upgrade linksys ea6200_firmware to a higher version than *:153743,and avoid the version *:153743; Upgrade linksys ea6200 to a higher version than -; Upgrade linksys ea6300_firmware to a higher version than *:153731,and avoid the version *:153731; Upgrade linksys ea6300 to a higher version than -; Upgrade linksys e4200v2_firmware to a higher version than 2.0.14212.1,and avoid the version (,2.0.14212.1]; Upgrade linksys e4200v2 to a higher version than -