PT-2025-30294 · Vsftpd+1 · Vsftpd+1

Tpcchecker · Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-44657

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Linksys EA6350 version 2.1.2

Description The chroot local user option is enabled in the dynamically generated vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

Recommendations Disable the chroot local user option in the vsftpd configuration file.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-44657

Affected Products

Linksys Re6350

Vsftpd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-44657 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44657 · Vendor Advisory
• https://twitter.com/CVEnew/status/1947322222479339546 · Twitter Post
• http://ea6350.com · Note
• https://gist.github.com/TPCchecker/7839fbd329ebd2f9f6b105c4926d4b0c · Note