What’s Vulnerable › Vulnerabilities

CVE-2024-25852

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-04-11 · updated 2026-06-17
• Weakness: CWE-284

Description

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

Affected products

• Linksys Re7000 Firmware: 2.0.9, 2.0.11, 2.0.15

References

• https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md
• https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd
• https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md
• https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd

Get alerted when CVE-2024-25852 or the next vulnerability affects your stack