PT-2025-35125 · Seeedstudio · Respeaker Linkit7688

Lxyilu · Published 2025-08-28 · Updated 2025-12-27 · CVE-2025-9576

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions seeedstudio ReSpeaker LinkIt7688 (affected versions not specified)

Description A vulnerability exists in seeedstudio ReSpeaker LinkIt7688, impacting an unknown function within the Administrative Interface component’s /etc/shadow file. This manipulation allows for the use of default credentials. Local access is required for exploitation, which is considered difficult due to its complexity. The exploit is publicly available. The vendor was contacted regarding this issue but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2025-9576

Affected Products

Respeaker Linkit7688

References · 8

• 🔥 https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9576 · Security Note
• https://twitter.com/CVEnew/status/2005031794328875116 · Twitter Post
• https://vuldb.com/?id.321690 · Note
• https://vuldb.com/?ctiid.321690 · Note
• https://t.me/CVEtracker/31156 · Telegram Post
• https://vuldb.com/?submit.636068 · Note