CVE-2025-34068: Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters
An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34068?
CVE-2025-34068 is considered a critical vulnerability due to its potential for unauthenticated remote command execution.
How do I fix CVE-2025-34068?
To mitigate CVE-2025-34068, users should upgrade the firmware of Samsung WLAN AP WEA453e to version 5.2.4.T1 or later.
What systems are affected by CVE-2025-34068?
CVE-2025-34068 affects Samsung WLAN AP WEA453e devices running firmware versions earlier than 5.2.4.T1.
Can CVE-2025-34068 be exploited remotely?
Yes, CVE-2025-34068 can be exploited remotely due to improper input validation in the device's diagnostic functionality.
What is the potential impact of CVE-2025-34068?
The potential impact of CVE-2025-34068 includes unauthorized execution of arbitrary shell commands on the affected device.