CVE-2013-2681

CRITICAL

Cisco Linksys E4200 <1.0.05 Build 7 - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-2681.

AI-analyzed exploit summary The exploit demonstrates reflected XSS and LFI vulnerabilities in Cisco Linksys E4200 firmware. It includes HTTP request examples for LFI via path traversal and XSS via injected JavaScript in multiple parameters.

Description

Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access.

Exploits (1)

exploitdb WORKING POC
webappshardware
https://www.exploit-db.com/exploits/25292

The exploit demonstrates reflected XSS and LFI vulnerabilities in Cisco Linksys E4200 firmware. It includes HTTP request examples for LFI via path traversal and XSS via injected JavaScript in multiple parameters.

Classification
Working Poc 90%
Attack Type
Xss | Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Cisco Linksys E4200 Firmware Version 1.0.05 build 7 and prior
No auth needed
Prerequisites: Network access to the vulnerable router
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/59714
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84068

Scores

CVSS v3 9.8
EPSS 0.4317
EPSS Percentile 97.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (1)
cisco/linksys_e4200_firmware 1.0.05
Published Feb 05, 2020
Tracked Since Feb 18, 2026