CVE-2024-36821

MEDIUM

Linksys Velop WiFi 5 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-36821. PoCs published by IvanGlinkin.

AI-analyzed exploit summary This PoC demonstrates a local privilege escalation (LPE) vulnerability in a router by exploiting writable cron scripts to add a new root user. The attacker gains root access by modifying a cron job script to append a new user to the /etc/passwd file.

Description

Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.

Exploits (1)

nomisec WORKING POC 3 stars
by IvanGlinkin · poc
https://github.com/IvanGlinkin/CVE-2024-36821

This PoC demonstrates a local privilege escalation (LPE) vulnerability in a router by exploiting writable cron scripts to add a new root user. The attacker gains root access by modifying a cron job script to append a new user to the /etc/passwd file.

Classification
Working Poc 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Unspecified router firmware (likely embedded Linux-based)
Auth required
Prerequisites: Physical/UART access to the router · Default credentials (guest:guest) · Writable cron scripts
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Scores

CVSS v3 6.8
EPSS 0.0290
EPSS Percentile 85.1%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-379 CWE-732
Status published
Products (1)
linksys/velop_whw0101_firmware 1.1.13.202617
Published Jun 11, 2024
Tracked Since Feb 18, 2026