CVE-2024-25852 - OpenCVE

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md
https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd

History

Wed, 14 Aug 2024 21:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-04-11T00:00:00

Updated: 2024-08-14T19:45:30.332Z

Reserved: 2024-02-12T00:00:00

Link: CVE-2024-25852

Vulnrichment

Updated: 2024-08-01T23:52:06.440Z

NVD

Status : Awaiting Analysis

Published: 2024-04-11T21:15:07.980

Modified: 2024-08-14T20:35:06.957

Link: CVE-2024-25852

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-25852", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-14T19:45:30.332Z", "dateReserved": "2024-02-12T00:00:00", "datePublished": "2024-04-11T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-04-11T20:15:42.928749"}, "descriptions": [{"lang": "en", "value": "Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the \"AccessControlList\" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd"}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:52:06.440Z"}, "title": "CVE Program Container", "references": [{"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["x_transferred"]}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "CWE-284 Improper Access Control"}]}], "affected": [{"vendor": "linksys", "product": "re7000_firmware", "cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.9:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.0.9", "status": "affected"}]}, {"vendor": "linksys", "product": "re7000_firmware", "cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.11:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.0.11", "status": "affected"}]}, {"vendor": "linksys", "product": "re7000_firmware", "cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.15:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.0.15", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-08-14T19:40:42.558388Z", "id": "CVE-2024-25852", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T19:45:30.332Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd", "tags": ["x_transferred"]}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:52:06.440Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-25852", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-14T19:40:42.558388Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.9:*:*:*:*:*:*:*"], "vendor": "linksys", "product": "re7000_firmware", "versions": [{"status": "affected", "version": "2.0.9"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.11:*:*:*:*:*:*:*"], "vendor": "linksys", "product": "re7000_firmware", "versions": [{"status": "affected", "version": "2.0.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:linksys:re7000_firmware:2.0.15:*:*:*:*:*:*:*"], "vendor": "linksys", "product": "re7000_firmware", "versions": [{"status": "affected", "version": "2.0.15"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T19:41:09.401Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://immense-mirror-b42.notion.site/Linksys-RE7000-command-injection-vulnerability-c1a47abf5e8d4dd0934d20d77da930bd"}, {"url": "https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md"}], "descriptions": [{"lang": "en", "value": "Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the \"AccessControlList\" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-04-11T20:15:42.928749"}}}, "cveMetadata": {"cveId": "CVE-2024-25852", "state": "PUBLISHED", "dateUpdated": "2024-08-14T19:45:30.332Z", "dateReserved": "2024-02-12T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-04-11T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}