CVE-2024-25852: High severity LinkSys RE7000 vulnerability
Published Apr 11, 2024
·Updated
Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.
Affected Software
5 affected components
LinkSys RE7000>=2.0.9<=2.0.15
All of the following
Any of the following
LinkSys Re7000 Firmware=2.0.9
LinkSys Re7000 Firmware=2.0.11
LinkSys Re7000 Firmware=2.0.15
LinkSys RE7000
Event History
Apr 11, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What actions can attackers perform with CVE-2024-25852?
Attackers exploiting CVE-2024-25852 can execute arbitrary commands on the affected Linksys RE7000 device.