Insecure Permissions in AK-Nord USB-Server-LXL Firmware
CVE-2025-52361
Currently unrated
What is CVE-2025-52361?
The AK-Nord USB-Server-LXL Firmware v0.0.16 contains insecure permissions in the /etc/init.d/lighttpd script, enabling a locally authenticated low-privilege user to execute arbitrary commands with root privileges. This occurs due to the script being executed with root privileges on every system interaction and during system boot, posing a significant risk to the integrity of the system.