CVE-2013-10062

CVE-2013-10062 describes a directory traversal vulnerability in the web interface of Linksys E1500 routers, specifically affecting firmware versions 1.0.00, 1.0.04, and 1.0.05. Authenticated attackers can exploit the next_page POST parameter in the /apply.cgi endpoint to access arbitrary files outside the web root, potentially exposing sensitive system files and configuration data. This vulnerability has a CVSS score of 6.9 (Medium), indicating a low attack complexity and requiring high privileges for exploitation, but with high confidentiality impact. While not listed as actively exploited in CISA's KEV catalog, a Metasploit module exists, and the vulnerability has garnered community discussion, suggesting awareness and potential for exploitation.