CVE-2024-25852

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

16.52% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high

Published

2024-04-11

Updated

2024-08-14

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25852.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-25846
• CVE-2024-25866
• CVE-2024-25833
• CVE-2024-25867
• CVE-2024-25832
• CVE-2024-25868