CVE-2025-44654

published 2025-07-21

CVE-2025-44654: In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
linksys	e2500_firmware	—	—

CWE-284