Read the docs
TI-2025-24236 Aliases CVE-2025-34068GHSA-93wv-9xc2-q2rq

Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters

Priority MEDIUM 50CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.2.4.T1 via improper input validation in the “Tech Support” diagnostic functionality. The command1 and command2 POST or GET parameters accept arbitrary shell commands that are executed with root privileges on the underlying operating system. An attacker can exploit this by crafting a request that injects shell commands to create output files in writable directories and then access their contents via the download endpoint. This flaw allows complete compromise of the device without authentication. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0101 63rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed WLAN AP WEA453e (Samsung Electronics): 5.2.4.T1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungWLAN AP WEA453ebefore 5.2.4.T15.2.4.T1Patch availableCNA
  • WLAN AP WEA453e VendorSamsung Affected before 5.2.4.T1 Fixed in 5.2.4.T1 Patch available CNA

Remediation

  • Fix · CNA WLAN AP WEA453e (Samsung Electronics) Fixed in 5.2.4.T1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-34068
  2. 2026-10-03 Alias added: GHSA-93wv-9xc2-q2rq

References

Exploit 1

Advisory 2

Other 1

  • TI-2025-15039 Out-of-bounds write in Samsung Mobile Devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-15038 Out-of-bounds write in Samsung Mobile Devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-04133 Path traversal in Samsung MagicINFO 9 Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-06858 Path traversal in Samsung MagicINFO 9 Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-00916 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before… KEVCVSS 3.1HIGH 8.8
  • TI-2022-06595 An improper check or handling of exceptional conditions in NPU driver prior to SMR… KEVCVSS 3.1HIGH 7.8
See all 2043 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences