Back to KEVs

CVE-2025-34068

Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters

Basic Information

CVE State
PUBLISHED
Reserved Date
April 15, 2025
Published Date
July 15, 2025
Last Updated
May 15, 2026
Vendor
Samsung Electronics
Product
WLAN AP WEA453e
Description
An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.

CVSS Scores

CVSS v4.0

9.3 - CRITICAL

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC Information

Exploitation
none
Automatable
Yes
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2026-02-16 00:00:00 UTC) Source

References

https://omriinbar.medium.com/samsung-wlan-ap-wea453e-vulnerabilities-7aa4a57d4dba https://fortiguard.fortinet.com/encyclopedia/ips/57323 https://www.samsung.com/us/business/support/owners/product/400-series-wea453/ https://s4e.io/tools/samsung-wlan-ap-remote-code-execution https://www.vulncheck.com/advisories/samsung-wlan-ap-wea453e-unauthenticated-rce

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2026-02-16 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel