CVE-2025-44654: Critical severity LinkSys E2500 vulnerability
In Linksys E2500 3.0.04.002, the chrootlocaluser option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-44654?
CVE-2025-44654 has a high severity rating due to potential unauthorized access and privilege escalation risks.
How do I fix CVE-2025-44654?
To fix CVE-2025-44654, disable the chroot_local_user option in the vsftpd configuration file.
What systems are affected by CVE-2025-44654?
CVE-2025-44654 affects the Linksys E2500 router running the 3.0.04.002 firmware version.
What are the potential consequences of CVE-2025-44654?
The potential consequences of CVE-2025-44654 include unauthorized system file access, privilege escalation, and internal network attacks.
How can I check if my Linksys E2500 is vulnerable to CVE-2025-44654?
You can check if your Linksys E2500 is vulnerable by reviewing the vsftpd configuration file for the enabled chroot_local_user option.