CVE-2024-25852

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md	Exploit
https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd	Broken Link
https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md	Exploit
https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd	Broken Link

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:linksys:re7000_firmware:2.0.9:::::::*
	cpe:2.3:o:linksys:re7000_firmware:2.0.11:::::::*
	cpe:2.3:o:linksys:re7000_firmware:2.0.15:::::::*

cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-04-11 21:15

Updated : 2025-06-17 20:50

NVD link : CVE-2024-25852

Mitre link : CVE-2024-25852

CVE.ORG link : CVE-2024-25852

JSON object : View

Products Affected

linksys

re7000_firmware
re7000

CWE

CWE-284

Improper Access Control

{"id": "CVE-2024-25852", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-04-11T21:15:07.980", "references": [{"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["Broken Link"], "source": "[email protected]"}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the \"AccessControlList\" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights."}, {"lang": "es", "value": "Linksys RE7000 v2.0.9, v2.0.11 y v2.0.15 tienen una vulnerabilidad de ejecuci\u00f3n de comandos en el par\u00e1metro \"AccessControlList\" del punto de funci\u00f3n de control de acceso. Un atacante puede utilizar la vulnerabilidad para obtener derechos de administrador del dispositivo."}], "lastModified": "2025-06-17T20:50:31.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D458466C-3906-4191-83DD-CE81790B7226"}, {"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E1C493F-E2E1-4A8C-9C7F-625102FF452A"}, {"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F28D5E8-5CFA-4FB2-99C8-63A9BEB8E031"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D04E83B6-EE99-42EB-AA37-895B1467CEDA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}