CVE-2025-52689
CRITICALAlcatel-Lucent OmniAccess Stellar Products <= 5.0.2 GA - Unauthenticated Session Fixation via Spoofed Login Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-52689. PoCs published by UltimateHG.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-52689, an authentication bypass vulnerability in Alcatel-Lucent Enterprise AP1361D Wi-Fi Access Points. The exploit generates a valid session ID by leveraging a timestamp-based signature mechanism and then uses this session to manipulate the client blacklist.
Description
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
Exploits (1)
This repository contains a functional exploit for CVE-2025-52689, an authentication bypass vulnerability in Alcatel-Lucent Enterprise AP1361D Wi-Fi Access Points. The exploit generates a valid session ID by leveraging a timestamp-based signature mechanism and then uses this session to manipulate the client blacklist.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H