CVE-2024-25852

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md	Exploit
https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd	Broken Link
https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md	Exploit
https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd	Broken Link

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:linksys:re7000_firmware:2.0.9:::::::*
	cpe:2.3:o:linksys:re7000_firmware:2.0.11:::::::*
	cpe:2.3:o:linksys:re7000_firmware:2.0.15:::::::*

cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:*

History

17 Jun 2025, 20:50

Type	Values Removed	Values Added
References	~~() https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md -~~	() https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md - Exploit
References	~~() https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd -~~	() https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd - Broken Link
First Time		Linksys Linksys re7000 Linksys re7000 Firmware
CPE		cpe:2.3:o:linksys:re7000_firmware:2.0.15:::::::* cpe:2.3:o:linksys:re7000_firmware:2.0.11:::::::* cpe:2.3:o:linksys:re7000_firmware:2.0.9:::::::* cpe:2.3:h:linksys:re7000:-:::::::*

21 Nov 2024, 09:01

Type	Values Removed	Values Added
References	~~() https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md -~~	() https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md -
References	~~() https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd -~~	() https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd -

14 Aug 2024, 20:35

Type	Values Removed	Values Added
CWE		CWE-284
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.8

11 Apr 2024, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-11 21:15

Updated : 2025-06-17 20:50

NVD link : CVE-2024-25852

Mitre link : CVE-2024-25852

CVE.ORG link : CVE-2024-25852

JSON object : View

Products Affected

linksys

re7000
re7000_firmware

CWE

CWE-284

Improper Access Control

{"id": "CVE-2024-25852", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-04-11T21:15:07.980", "references": [{"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the \"AccessControlList\" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights."}, {"lang": "es", "value": "Linksys RE7000 v2.0.9, v2.0.11 y v2.0.15 tienen una vulnerabilidad de ejecuci\u00f3n de comandos en el par\u00e1metro \"AccessControlList\" del punto de funci\u00f3n de control de acceso. Un atacante puede utilizar la vulnerabilidad para obtener derechos de administrador del dispositivo."}], "lastModified": "2025-06-17T20:50:31.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D458466C-3906-4191-83DD-CE81790B7226"}, {"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E1C493F-E2E1-4A8C-9C7F-625102FF452A"}, {"criteria": "cpe:2.3:o:linksys:re7000_firmware:2.0.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F28D5E8-5CFA-4FB2-99C8-63A9BEB8E031"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:linksys:re7000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D04E83B6-EE99-42EB-AA37-895B1467CEDA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

8.8 /10