CVE-2024-25852

PoC —

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Apr 11, 2024 (Apr 11, 2024)

Modified

Jun 17, 2026

Description

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

Vendors: linksys
Products: re7000 firmware
Weakness: CWE-284
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.5%)

In the news0 stories

No ingested article mentions this CVE yet.