Unauthorized Access Vulnerability in FTP/SFTP Services by Vendor

CVE-2025-41664

What is CVE-2025-41664?

This vulnerability allows low-privileged remote attackers to gain unauthorized access to critical resources, including firmware and certificates. The issue arises from improper permission handling during the runtime of FTP/SFTP services. Exploitation of this vulnerability could enable attackers to escalate their privileges and potentially modify firmware, leading to broader security implications.

References