CVE-2013-3064

Name of the Vulnerable Software and Affected Versions Linksys EA6500 version 1.1.28.147876

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter. This is related to an open redirect vulnerability in the ui/dynamic/unsecured.html page.

Recommendations For version 1.1.28.147876, consider restricting access to the ui/dynamic/unsecured.html page until a fix is available. As a temporary workaround, avoid using the target parameter in the affected page to minimize the risk of exploitation.