Threats tagged 'ghsa-vwp2-w658-9xx8'

A critical vulnerability exists in Linksys EA8100 firmware version 1.0.3.216940 affecting the JNAP API component. The flaw involves the SetRemoteSetting/SetUnsecuredWiFiWarning functions in the ui_server.lua file, where manipulation of the isEnabled/enabled argument leads to missing authentication. This allows remote attackers to exploit the vulnerability without any privileges or user interaction. The vulnerability has a CVSS score of 10.0, indicating severe impact on confidentiality, integrity, and availability. The vendor has not responded to the disclosure, and no patch information is available. Public exploit details have been disclosed, but no known exploitation in the wild is reported yet.