HIGH

CVE-2013-2678

CVSS v3

8.1

HIGH

EPSS Score

71.3%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

Technical details

Published
2/4/2020

Frequently asked questions

What is CVE-2013-2678?

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

Is CVE-2013-2678 actively exploited?

Active exploitation of CVE-2013-2678 has not been confirmed. The EPSS score is 71.3%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2013-2678?

CVE-2013-2678 has a CVSS v3 base score of 8.1 (HIGH severity).

Is CVE-2013-2678 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Other 2013 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).