CVE Feed

    Dashboard / CVE / CVE-2024-25852

    CVE-2024-25852

    Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.

    Published:Apr 11, 2024
    Last Modified:Jun 17, 2025
    EPS:Apr 11, 2024
    EPSS Score:0.93111
    CVSS Score:8.8

    Affected Products

    Vendor
    Linksys
    Product
    Re7000
    Vendor
    Linksys
    Product
    Re7000 Firmware

    Exploits

    https://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.mdhttps://github.com/ZackSecurity/VulnerReport/blob/cve/Linksys/1.md

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2026-86299 (CVSS 8.6) — A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of th…
    CVE-2025-14136 (CVSS 7.4) — A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1…
    CVE-2025-14135 (CVSS 7.4) — A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04…
    CVE-2025-14134 (CVSS 7.4) — A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04…
    CVE-2025-14133 (CVSS 7.4) — A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/…
    CVE-2025-60696 (CVSS 8.4) — A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Fi…
    CVE-2025-9575 (CVSS 2.1) — A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04…
    CVE-2025-9483 (CVSS 7.4) — A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.…
    CVE-2025-9482 (CVSS 7.4) — A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.0…
    CVE-2025-9481 (CVSS 7.4) — A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.01…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High