PT-2025-30319 · Linksys+1 · Linksys E2500+1

John Doe + 1 · CVE-2025-44654 · Published 2025-07-21 · Updated 2026-01-02

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys E2500 version 3.0.04.002

Description The chroot local user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

Recommendations Disable the chroot local user option in the vsftpd configuration file.

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-44654

Affected Products

Linksys E2500

Vsftpd

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-44654 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44654 · Vendor Advisory
• http://e2500.com · Note
• https://t.me/cveNotify/147625 · Telegram Post
• https://gist.github.com/TPCchecker/279708bf9c599c836ea66f3a3e0c25e1 · Note
• https://twitter.com/VulmonFeeds/status/1947371618147106880 · Twitter Post
• https://twitter.com/CVEnew/status/1947352508386390416 · Twitter Post
• https://t.me/cvenotify/129721 · Telegram Post