What is the CVSS score of CVE-2025-44654?

CVE-2025-44654 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.1%.

Which versions of E2500 Firmware are affected by CVE-2025-44654?

The Linksys E2500 router (firmware 3.0.04.002) contains a critical improper access control vulnerability in its bundled FTP service that could allow unauthorized file access and privilege escalation,…

How to fix or mitigate CVE-2025-44654?

Within 24 hours: Scan network for active Linksys E2500 routers and document inventory. Within 7 days: Disable FTP service on all affected routers via management console or disable remote access entirely; isolate routers on restricted network segments. Within 30 days: Replace all E2500 routers with current-generation hardware and decommission deprecated units from the network.

E2500 Firmware CVE-2025-44654

CRITICAL

Improper Access Control (CWE-284)

2025-07-21 cve@mitre.org

Authentication Bypass Privilege Escalation Linksys E2500 Firmware

9.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 05, 2026 - 01:40 vuln.today

DescriptionCVE.org

In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

AnalysisAI

Improper access control in the Linksys E2500 wireless router (firmware 3.0.04.002) stems from its bundled vsftpd FTP service, where the reporter flags the chroot_local_user setting as enabling unauthorized reach into system files, privilege escalation, or lateral pivoting into the internal network. The E2500 is a discontinued consumer/SOHO router, and no public exploit identified at time of analysis; EPSS estimates only a 1.08% exploitation probability (61st percentile). Notably, the single reference is a third-party GitHub gist rather than a vendor advisory, and the technical claim is internally inconsistent (see risk assessment).