CVE-2025-44657
21.07.2025, 16:15
In Linksys EA6350 V2.1.2, the chroot_local_user option is enabled in the dynamically generated vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.Enginsight
Vendor | Product | Version |
---|---|---|
linksys | ea6350_firmware | 2.1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration