Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-36821. PoCs published by IvanGlinkin.
AI-analyzed exploit summary This PoC demonstrates a local privilege escalation (LPE) vulnerability in a router by exploiting writable cron scripts to add a new root user. The attacker gains root access by modifying a cron job script to append a new user to the /etc/passwd file.
Description
Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.
Exploits (1)
This PoC demonstrates a local privilege escalation (LPE) vulnerability in a router by exploiting writable cron scripts to add a new root user. The attacker gains root access by modifying a cron job script to append a new user to the /etc/passwd file.
References (2)
Scores
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H