cvedb.io
CVE-2025-44654
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2025-07-21T18:15:27.817 · Last modified 2026-06-17T09:25:08.090

Summary

In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

Affected products

linksys — e2500_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when linksys ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.