CVE-2025-52692

Katalog CVE

CVSS 8.8 · High EPSS 6,4%

Kerentanan Missing Authentication for Critical Function pada linksys e9450-sg firmware. Skor CVSS 3.1 8.8 (High) menurut CNA.

Deskripsi (NVD)

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials.

Rincian

Terbit di NVD

19 Desember 2025

Terakhir diubah

30 September 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

6,4% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-118/ exploit · advisory pihak ketiga